Fuzzy logic based anomaly detection for embedded network security cyber sensor

IEEE SSCI 2011: Symposium Series on Computational Intelligence - CICS 2011: 2011 IEEE Symposium on Computational Intelligence in Cyber Security

Volumn , Issue , 2011, Pages 202-209

  Linda, Ondrej ^a   Manic, Milos ^a   Vollmer, Todd ^b   Wright, Jason ^b  

^a UNIVERSITY OF IDAHO   (United States)

^b IDAHO NATIONAL LABORATORY   (United States)

Author keywords

Anomaly Detection; Cyber Sensor; Embedded Systems; Fuzzy Logic System; Online Clustering

Indexed keywords

ANOMALY DETECTION; COMPUTATIONAL REQUIREMENTS; CRITICAL ASSET; CYBER SENSOR; CYBER TERRORISM; EMBEDDED NETWORK; FUZZY LOGIC RULES; FUZZY LOGIC SYSTEM; HARDWARE IMPLEMENTATIONS; INCOMING PACKETS; NETWORK BEHAVIORS; NETWORK DATA; ONLINE-CLUSTERING;

ARTIFICIAL INTELLIGENCE; CLUSTERING ALGORITHMS; CONTROL SYSTEMS; CRITICAL INFRASTRUCTURES; EMBEDDED SYSTEMS; FUZZY LOGIC; FUZZY SYSTEMS; HARDWARE; LEARNING ALGORITHMS; PUBLIC WORKS; SENSORS;

NETWORK SECURITY;

EID: 79961184981     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CICYBS.2011.5949392     Document Type: Conference Paper

References (29)

1. D. Yang, A. Usynin, J. W. Hines, "Anomaly-Based Intrusion Detection for SCADA Systems," in Proc. of 5th Intl. Topical Meeting on Nuclear Plant Instrumentation, Control and Human Machine Interface Technologies (NPIC&HMIT 05), Albuquerque, NM, Nov 12-16, 2006.
2. H. S. Kim, J. M. Lee, T. Park, W. H. Kwon, "Design of networks for distributed digital control systems in nuclear power plants," Intl. Topical Meeting on Nuclear Plant Instrumentation, Controls, and Human- Machine Interface Technologies (NPIC&HMIT 2000), Washington, DC, November 2000.
3. Dana A. Shea, "Critical Infrastructure: Control Systems and the Terrorist Threat," Report for Congress RL31534, February, 2003.
4. nd IEEE Conf. on Human System Interactions, Catania, Italy, pp. 632-636, May 2009.
5. J. P. Anderson, Computer security threat monitoring and surveillance, Technical report, James P. Anderson Co, 1980.
6. D. E. Denning, "An Intrusion Detection Model," in IEEE Trans. on Software Engineering,vol. SE-13, pp. 222-232, February 1987.
7. R. Sommer, V. Paxson, "Outside the Closed World: On Using Machine Learning For Network Intrusion Detection," in Proc. of IEEE Symp. on Security and Privacy, Oakland, California, pp. 305-316, 2010.
8. V. Chandola, A. Banerjee, V. Kumar, "Anomaly Detection: A Survey," Technical Report, University of Minnesota, 2007.
9. I. H. Witten, E. Frank, Data Mining: Practical Machine Learning Tools and Techniques, Morgan Kaufmann Publishers, 2005.
10. Z. Zhang, J. Li, C. Manikopulos, J. Jorgenson, J. Ucles, "HIDE: a Hierarchical Network Intrusion Detection System Using Statistical Preprocessing and Neural Network Classification," in Proc. IEEE Workshop on Information Assurance and Security, 2001.
11. J. Ryan, M. Llin, R. Miikkulainen, "Intrusion Detection with Neural Networks, " in Advances in Neural Information Processing Systems 10, Cambridge, MA, MIT Press, 1998.
12. H. Debar, B Dorizzi, "An Application of a Recurrent Network to an Intrusion Detection System," in Proc. of the International Joint Conference on Neural Networks, pp. 78-83.
13. O. Linda, T. Vollmer, M. Manic,"Neural Network Based Intrusion Detection System for Critical Infrastructures," in Proc. Int. Joint INNSIEEE Conf. on Neural Networks, Atlanta, Georgia, June 14-19, 2009.
14. W. Hu, Y. Liao, V. R. Vemuri, "Robust Anomaly Detection Using Support Vector Machines," in Proc. International Conference on Machine Learning, 2003.
15. G. Stein, B. Chen, A. S. Wu, K. A. Hua, "Decision Tree Classifier For Network Intrusion Detection With GA-based Feature Selection," in Proc. of the 43rd ACM Southeast Conference, Kennesaw, GA, March 2005.
16. F. Gonzalez, D. Dasgupta, J. Gomez, M. Kaniganti, "An Evolutionary Approach to Generate Fuzzy Anomaly Signatures," in Proc. the IEEE Information Assurance Workshop, June 2003.
17. J. Gomez, D. Dasgupta, F. Gonzalez, "Detecting Cyber Attacks with Fuzzy Data Mining Techniques," in Proc. of the Workshop on Data Mining for Counter Terrorism and Security, 3rd SIAM Conference on Data Mining, San Francisco, CA, May, 2003.
18. S. Zhong, T. Khoshgoftaar, N. Seliya, "Clustering-based network intrusion detection," in Intl. Journal of Reliability, Quality and Safety, Vol. 14, No. 2, 2007, pp. 169-187. (Pubitemid 46871788)
19. Q. Wang, V. Mehalooikonomou, "A Clustering Agorithm for Intrusion Detection," in SPIE Conference on Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security, Orlando, Florida, USA, 2005.
20. L. Portnoy, E. Eskin, S. Solfo, "Intrusion detection with unlabeled data using clustering," in Proc. Of ACM CSS Workshop on Data Mining Applied Security, Philadelphia, PA, November 5-8, 2001.
21. R. Sommer, V. Paxson, N. Weaver, "An architecture for exploiting multi-core processor to parallelize network intrusion prevention," Concurrency Computation: Practice and Experience, 21: 1255-1279, 2009.
22. Tofino webpage [URL], Available: http://www.tofinosecurity.com, from October 2010.
23. L. A. Zadeh, "Fuzzy Sets," in Information and Control, vol. 8, pp. 338- 353, 1965.
24. J. M. Mendel, Uncertain Rule-Based Fuzzy Logic Systems: Introduction and New Directions, Upper Saddle River, NJ: Prentice Hall PTR, 2001.
25. G. J. Klir, B. Yuan, Fuzzy Sets and Fuzzy Logic Theory and Applications, Prentice Hall, New York, 1995.
26. Intel Corporation, Datasheet-Intel IXP42X Product Line of Network Processors and IXC1100 Control Plane Processor, June 2007.
27. Allan Bradley PLC 5 Controller webpage, Available: http://www.ab.com/ programmablecontrol/plc/, from October 2010.
28. Nmap webpage [URL], Available: http://nmap.org, from October 2010.
29. Nessus webpage [URL], Available: http://www.nessus.org.org/nessus/, from October 2010.