Online anomaly detection under adversarial impact

Journal of Machine Learning Research

Volumn 9, Issue , 2010, Pages 405-412

  Kloft, Marius ^a   Laskov, Pavel ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b UNIVERSITY OF TÜBINGEN   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION METHODS; EXPERIMENTAL EVALUATION; ITS EFFICIENCIES; ONLINE ANOMALY DETECTION; SECURITY ANALYSIS; THEORETICAL BOUNDS;

LEARNING ALGORITHMS;

ARTIFICIAL INTELLIGENCE;

EID: 84862299994     PISSN: 15324435     EISSN: 15337928     Source Type: Journal    
DOI: None     Document Type: Conference Paper

References (21)

1. M. Barreno, B. Nelson, R. Sears, A. Joseph, and J. Tygar. Can machine learning be secure? In ACM Symposium on Information, Computer and Communication Security, pages 16-25, 2006.
2. N. Dalvi, P. Domingos, M. Sumit, and S. D. Verma. Adversarial classification. In In KDD, pages 99-108. ACM Press, 2004.
3. O. Dekel and O. Shamir. Learning to classify with missing and corrupted features. In International Conference on Machine Learning (ICML), pages 216-223, 2008.
4. P. Fogla and W. Lee. Evading network anomaly detection systems: formal reasoning and practical techniques. In ACM Conference on Computer and Communications Security, pages 59-68, 2006.
5. A. Globerson and S. Roweis. Nightmare at test time: Robust learning by feature deletion. In International Conference on Machine Learning (ICML), pages 353-360, 2006.
6. S. Hofmeyr, S. Forrest, and A. Somayaji. Intrusion detection using sequences of system calls. Journal of Computer Security, 6(3):151-180, 1998.
7. M. Kloft and P. Laskov. Security analysis of online centroid anomaly detection. Technical Report UCB/EECS-2010-22, EECS Department, University of California, Berkeley, Feb 2010. CoRR abs/1003.0079.
8. P. Laskov and M. Kloft. A framework for quantitative security analysis of machine learning. In D. Balfanz and J. Staddon, editors, AISec, pages 1-4. ACM, 2009. ISBN 978-1-60558-781-3.
9. P. Laskov, C. Schäfer, and I. Kotenko. Intrusion detection in unlabeled data with quarter-sphere support vector machines. In Detection of Intrusions and Malware, and Vulnerability Assessment, Proc. of DIMVA Conference, pages 71-82, 2004.
10. C. Leslie, E. Eskin, and W. Noble. The spectrum kernel: A string kernel for SVM protein classification. In Proc. Pacific Symp. Biocomputing, pages 564-575, 2002.
11. D. Lowd and C. Meek. Good word attacks on statistical spam filters. In Proceedings of the 11th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pages 641-647, 2005.
12. B. Nelson and A. D. Joseph. Bounding an attack's complexity for a simple learning model. In Proc. of the First Workshop on Tackling Computer Systems Problems with Machine Learning Techniques (SysML), Saint-Malo, France, 2006.
13. J. Newsome, B. Karp, and D. Song. Paragraph: Thwarting signature learning by training maliciously. In Recent Adances in Intrusion Detection (RAID), pages 81-105, 2006.
14. K. Rieck and P. Laskov. Language models for detection of unknown attacks in network traffic. Journal in Computer Virology, 2(4):243-256, 2007.
15. B. Schölkopf and A. Smola. Learning with Kernels. MIT Press, Cambridge, MA, 2002.
16. B. Schölkopf, J. Platt, J. Shawe-Taylor, A. Smola, and R. Williamson. Estimating the support of a high-dimensional distribution. Neural Computation, 13(7): 1443-1471, 2001.
17. D. Tax and R. Duin. Support vector domain description. Pattern Recognition Letters, 20(11-13):1191-1199, 1999.
18. C. Teo, A. Globerson, S. Roweis, and A. Smola. Convex learning with invariances. In Advances in Neural Information Proccessing Systems (NIPS), 2008. to appear.
19. A. Tsybakov. On nonparametric estimation of density level sets. Annals of Statistics, 25:948-969, 1997.
20. K. Wang and S. Stolfo. Anomalous payload-based network intrusion detection. In Recent Adances in Intrusion Detection (RAID), pages 203-222, 2004.
21. K. Wang, J. Parekh, and S. Stolfo. Anagram: A content anomaly detector resistant to mimicry attack. In Recent Adances in Intrusion Detection (RAID), pages 226-248, 2006.