Policy-enhanced ANFIS model to counter SOAP-related attacks

Knowledge-Based Systems

Volumn 35, Issue , 2012, Pages 64-76

  Chan, Gaik Yee ^a   Lee, Chien Sing ^a   Heng, Swee Huay ^a  

^a MULTIMEDIA UNIVERSITY   (Malaysia)

Author keywords

Business Intelligence; E commerce; Fuzzy inference system; Intrusion detection; Intrusion prevention

Indexed keywords

ADAPTIVE NEURO-FUZZY INFERENCE SYSTEM; ANFIS MODEL; APPLICATION LAYERS; BUSINESS POLICIES; BUSINESS-RELATED INFORMATION; DETECTION ACCURACY; E-COMMERCE APPLICATIONS; FALSE POSITIVE RATES; FUZZY INFERENCE SYSTEMS; FUZZY MODELS; INPUT FIELD; INPUT VALUES; INTRUSION PREVENTION; NETWORK-BASED INTRUSION DETECTION; SECURITY PROTECTION; SERVICE PLATFORMS; SERVICE-BASED;

COMPETITIVE INTELLIGENCE; ELECTRONIC COMMERCE; FUZZY SYSTEMS; INTRUSION DETECTION; WEB SERVICES; WEBSITES;

COMPUTER SIMULATION;

EID: 84866485165     PISSN: 09507051     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.knosys.2012.04.013     Document Type: Article

References (34)

1. M.S. Abadeh, J. Habibi, and C. Lucas Intrusion detection using a fuzzy genetics-based learning algorithm Journal of Network and Computer Applications 30 1 2007 414 428 (Pubitemid 44666474)
2. A. Andreu Professional Pen Testing for Web Applications 2006 Wiley Publishing Inc Indianapolis
3. S.M. Bridges, R.B. Vaughn, Fuzzy Data Mining and Genetic Algorithms Applied to Intrusion Detection. Proceedings of the 23rd National Information Systems Security Conference (NISSC), 2000, pp. 13-31.
4. H.T. He, X.N. Luo, and B.L. Liu Detecting Anomalous Network Traffic with Combined Fuzzy-Based Approaches Advances in Intelligent Computing, Lecture Notes in Computer Science 3645 2005 433 442
5. X.D. Hoang, J. Hu, and P. Bertok A program-based anomaly intrusion detection scheme using multiple detection engines and fuzzy inference Journal of Network and Computer Applications 32 6 2009 1219 1228
6. J. Holgersson, E. Soderstrom, Web Service Security-Vulnerabilities and threats within the context of WS-security, Proceedings of IEEE 4th Conference on Standardization and Innovation in Information Technology, 2005, pp. 138-146.
7. J.R. Jang ANFIS: adaptive-network-based fuzzy inference system IEEE Transactions on Systems, Man, and Cybernetics 23 3 1993 665 685
8. M.M.T. Jawhar, and M. Mehrotra Design network intrusion detection system using hybrid fuzzy-neural network International Journal of Computer Science and Security 4 3 2010 285 294
9. M. Jazzar, and A. Jantan A novel soft computing inference engine model for intrusion detection International Journal of Computer Science and Network Security 8 4 2008 1 9
10. M. Jensen, N. Gruschka, and R. Herkenhoner A survey of attacks on web services Journal of Computer Science-Research and Development 24 4 2009 185 197
11. A. Keles, M. Kolcak, and A. Keles The adaptive neuro-fuzzy model for forecasting the domestic debt Knowledge-Based-Systems 21 8 2008 951 957
12. C. Kruegel, G. Vigna, and W. Robertson A multi-model approach to the detection of web-based attacks Journal of Computer Networks 48 5 2005 717 738 (Pubitemid 40684159)
13. G. Kumar, K. Kumar, and M. Sachdeva The use of artificial intelligence based techniques for intrusion detection: a review Artificial Intelligence Review 34 4 2010 369 387
14. L. Lancieri, and L. Boubchir Using multiple uncertain examples and adaptive fuzzy reasoning to optimize image characterization Knowledge-Based- Systems 20 3 2007 266 276 (Pubitemid 46436463)
15. P. Lindstrom, Attacking and Defending Web Services. A Spire Research Report, 2004. < http://www.forumsys.com/resources/resources/whitepapers/ Attacking-and-Defending-WS.pdf >.
16. Y.S. Loh, W.C. Yau, C.T. Wong, W.C. Ho, Design and Implementation of an XML Firewall, Proceedings of the 2006 International Conference on Computational Intelligence and Security (CIS2006), 2006, pp. 1147-1150.
17. S. Megaache, T. Karran, G.R.R. Justo, A Role-based Security Architecture for Business Intelligence, 2000, pp. 295-305.
18. E. Moradian, and A. Hakansson Possible attacks on XML web services IJCSNS International Journal of Computer Science and Network Security 6 1B 2006 154 170
19. S. Orrin, Intel Corp., SOA/XML model and New XML/SOA/Web 2.0 Attacks and Threats, 2010. < http://www.defcon.org/images/defcon-15/dc15-presentations/ dc-15-orrin.pdf >.
20. T. Ozyer, R. Alhajj, and K. Barker Intrusion detection by integrating boosting genetic fuzzy classifier and data mining criteria for rule pre-screening Journal of Network and Computer Applications 30 1 2007 99 113 (Pubitemid 44666485)
21. S. Peddabachigari, A. Abraham, C. Grosan, and J. Thomas Modeling intrusion detection system using hybrid intelligent systems Journal of Network and Computer Applications 30 1 2007 114 132 (Pubitemid 44666486)
22. C.I. Pinzón, J. Bajo, J.F. De Paz, and J.M. Corchado S-MAS: an adaptive hierarchical distributed multi-agent architecture for blocking malicious SOAP messages within Web Services environments Expert Systems with Applications 38 2011 5486 5499
23. V. Relan, B. Sonawane, Detection and Mitigation of Web Services Attacks Using Markov Model. CMSC 678: Machine Learning Project, 2009. < http://userpages.umbc.edu/~relan1/CMSC%20678%20Project%20Report.pdf >.
24. W. Robertson, G. Vigna, C. Kruegel, R.A. Kemmerer, Using Generalization and Characterization Techniques in the Anomaly-based Web Attacks, The 13th Annual Network and Distributed System Security Symposium (NDSS), 2006. < http://www.isoc.org/isoc/conferences/ndss/06/proceedings/papers/ anomaly-signatures.pdf >.
25. M. Sheikhan, and Z. Jadidi Misuse detection using hybrid of association rule mining and connectionist modeling World Applied Sciences Journal 7 2009 31 37 Special Issue of Computer & IT
26. M. Sheikhan, and M.S. Rad Misuse detection based on feature selection by fuzzy association rule mining World Applied Sciences Journal 10 2010 32 40 Special Issue of Computer & Electrical Engineering
27. J.S. Sherif, T.G. Dearmond, Intrusion detection: systems and models, The Eleventh IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises, 2002, pp. 115-133.
28. T. Subbulakshmi, S.M. Shalinie, C.S. Reddy, and A. Ramamoorthi Detection and classification of DDoS attacks using fuzzy inference system Recent Trends in Network Security and Applications, Communications in Computer and Information Science 89 P1 2010 242 252
29. M.Y. Su Using clustering to improve the KNN-based classifiers for online anomaly network traffic identification Journal of Network and Computer Applications 34 2 2011 722 730
30. A.N. Toosi, M. Kahani, A novel soft computing model using adaptive neuro-fuzzy inference system for intrusion detection, IEEE International Conference on Networking, Sensing and Control, London, UK, 2007, pp. 834-839. (Pubitemid 47468901)
31. WEKA Software (weka-3-6-4jre.exe). < http://www.cs.waikato.ac.nz/ml/ weka/ > (December 2010).
32. wsKnight. < http://net-square.com/wschess/index.html >.
33. A.E. Yilmaz, and Z. Telatar Note-against-note two-voice counterpoint by means of fuzzy logic Knowledge-Based-Systems 23 3 2010 256 266
34. A. Zainal, M.A. Maarof, and S.M. Shamsuddin Ensemble classifiers for network intrusion detection system Journal of Information Assurance and Security 4 2009 217 225