RT-MOVICAB-IDS: Addressing real-time intrusion detection

Future Generation Computer Systems

Volumn 29, Issue 1, 2013, Pages 250-261

  Herrero, Álvaro ^a   Navarro, Martí ^b   Corchado, Emilio ^c   Julián, Vicente ^b  

^a UNIVERSITY OF BURGOS   (Spain)

^b UNIVERSITAT POLITÈCNICA DE VALÈNCIA   (Spain)

^c UNIVERSITY OF SALAMANCA   (Spain)

Author keywords

Artificial Neural Networks; Case based reasoning; Computer network security; Hybrid Artificial Intelligent Systems; Intrusion detection; Multi Agent systems; Time bounded deliberative process; Unsupervised learning

Indexed keywords

ARTIFICIAL INTELLIGENT; CBR; DELIBERATIVE AGENTS; DELIBERATIVE PROCESS; INTELLIGENT INTRUSION DETECTION SYSTEMS; MULTI AGENT SYSTEM (MAS); MULTIAGENT ARCHITECTURE; REAL DATA SETS; REAL TIME REQUIREMENT; SYSTEM RESPONSE; TEMPORAL CONTROLS; TEMPORAL RESTRICTIONS; TIME PROCESSING;

COMPUTER NETWORKS; INTELLIGENT AGENTS; INTELLIGENT SYSTEMS; MULTI AGENT SYSTEMS; NEURAL NETWORKS; UNSUPERVISED LEARNING;

INTRUSION DETECTION;

EID: 84867858473     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2010.12.017     Document Type: Conference Paper

References (91)

1. J.M. Myerson Identifying enterprise network vulnerabilities International Journal of Network Management 12 2002 135 144
2. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, N. Weaver, The spread of the sapphire/slammer worm, in: Technical Report, International Computer Science Institute - University of California at Berkeley, 2003.
3. H. Kopetz Real-time Systems: Design Principles for Distributed Embedded Applications 1997 Kluwer Academic Publishers
4. W. Wang, X. Guan, and X. Zhang Processing of massive audit data streams for real-time anomaly intrusion detection Computer Communications 31 2008 58 72
5. S.E. Schechter, J. Jung, and A.W. Berger Fast detection of scanning worm infections 7th International Symposium on Recent Advances in Intrusion Detection (RAID 2004) 2004 Springer Berlin/Heidelberg 59 81
6. T. Dean, M. Boddy, An analysis of time-dependent planning, in: 7th National Conference on Artificial Intelligence, 1988, pp. 49-54.
7. A. Garvey, and V. Lesser A survey of research in deliberative real-time artificial intelligence Real-Time Systems 6 1994 317 347
8. B. Hayes-Roth, R. Washington, D. Ash, A. Collinot, A. Vina, and A. Seiver Guardian: A prototype intensive-care monitoring agent Artificial Intelligence in Medicine 4 1992 165 185
9. A.E. Howe, D.M. Hart, and P.R. Cohen Addressing real-time constraints in the design of autonomous agents Real-Time Systems 2 1990 81 97
10. D.J. Musliner, E.H. Durfee, and K.G. Shin CIRCA: A cooperative intelligent real-time control architecture IEEE Transactions on Systems, Man, and Cybernetics 23 1993 1561 1574
11. V. Julian, and V. Botti Developing real-time multi-agent systems Integrated Computer-Aided Engineering 11 2004 135 149
12. Á. Herrero, E. Corchado, and J.M. Sáiz MOVICAB-IDS: Visual analysis of network traffic data streams for intrusion detection E. Corchado, H. Yin, V. Botti, C. Fyfe, 7th International Conference on Intelligent Data Engineering and Automated Learning (IDEAL 2006) 2006 Springer Heidelberg 1424 1433
13. Á. Herrero, and E. Corchado Mining network traffic data for attacks through MOVICAB-IDS Foundations of Computational Intelligence 2009 Springer 377 394
14. E. Corchado, and Á. Herrero Neural visualization of network traffic data for intrusion detection Applied Soft Computing 11 2011 2042 2056
15. F.-Y. Leu, C.-T. Yang, and F.-C. Jiang Improving reliability of a heterogeneous grid-based intrusion detection platform using levels of redundancies Future Generation Computer Systems 26 2010 554 568
16. A. Aamodt, and E. Plaza Case-based reasoning - foundational issues, methodological variations, and system approaches AI Communications 7 1994 39 59
17. H. Hotelling Analysis of a complex of statistical variables into principal components Journal of Education Psychology 24 1933 417 444
18. K. Pearson On lines and planes of closest fit to systems of points in space Philosophical Magazine 2 1901 559 572
19. E. Oja Neural networks, principal components, and subspaces International Journal of Neural Systems 1 1989 61 68
20. J.H. Friedman, and J.W. Tukey A projection pursuit algorithm for exploratory data-analysis IEEE Transactions on Computers 23 1974 881 890
21. A. Abraham, C. Grosan, and C. Martin-Vide Evolutionary design of intrusion detection programs International Journal of Network Security 4 2007 328 339
22. K. Julisch Data mining for intrusion detection: a critical review D. Barbará, S. Jajodia, Applications of Data Mining in Computer Security 2002 Kluwer Academic Publishers 33 62
23. T. Chih-Fong, H. Yu-Feng, L. Chia-Ying, and L. Wei-Yang Intrusion detection by machine learning: a review Expert Systems with Applications 36 2009 11994 12000
24. A. Tajbakhsh, M. Rahmati, and A. Mirzaei Intrusion detection using fuzzy association rules Applied Soft Computing 9 2009 462 469
25. A. Abraham, R. Jain, J. Thomas, and S.Y. Han D-SCIDS: Distributed soft computing intrusion detection system Journal of Network and Computer Applications 30 2007 81 98
26. S. Zanero, S. Savaresi, Unsupervised learning techniques for an intrusion detection system, in: ACM Symposium on Applied Computing, 2004, pp. 412-419.
27. C. Zhang, J. Jiang, and M. Kamel Intrusion detection using hierarchical neural networks Pattern Recognition Letters 26 2005 779 791
28. Á. Herrero, E. Corchado, P. Gastaldo, and R. Zunino Neural projection techniques for the visual inspection of network traffic Neurocomputing 72 2009 3649 3658
29. D.J. Marchette Computer Intrusion Detection and Network Monitoring: A Statistical Viewpoint 2001 Springer-Verlag New York, Inc.
30. M. Roesch, Snort-lightweight intrusion detection for networks, in: 13th Systems Administration Conference, LISA'99, 1999, pp. 229-238.
31. C. Ahlberg, and B. Shneiderman Visual information seeking: tight coupling of dynamic query filters with starfield displays Readings in Information Visualization: using Vision to Think 1999 Morgan Kaufmann Publishers Inc. 244 250
32. K. Lakkaraju, W. Yurcik, and A.J. Lee NVisionIP: Netflow visualizations of system state for security situational awareness 2004 ACM Workshop on Visualization and Data Mining for Computer Security 2004 ACM Washington DC, USA 65 72
33. S.T. Teoh, K.L. Ma, S.F. Wu, and X. Zhao Case study: interactive visualization for internet security IEEE Conference on Visualization, Vis 2002 2002 IEEE Computer Society Boston, Massachusetts
34. K. Nyarko, T. Capers, C. Scott, and K.A. Ladeji-Osias Network intrusion visualization with NIVA, an intrusion detection visual analyzer with haptic integration T. Capers, 10th Symposium on Haptic Interfaces for Virtual Environment and Teleoperator Systems, HAPTICS 2002 2002 277 284
35. J.R. Goodall, W.G. Lutters, P. Rheingans, and A. Komlodi Preserving the big picture: visual network traffic analysis with TNV IEEE Workshop on Visualization for Computer Security, VizSEC 05 2005 IEEE Computer Society 47 54
36. H. Koike, K. Ohno, and K. Koizumi Visualizing cyber attacks using IP matrix IEEE Workshop on Visualization for Computer Security, VizSEC 05 2005 IEEE Computer Society 91 98
37. C. Muelder, K.L. Ma, and T. Bartoletti Interactive visualization for network and port scan detection D. Zamboni, C. Kruegel, Nineth International Symposium on Recent Advances in Intrusion Detection, RAID 2006 2006 Springer Heidelberg 265 283
38. A. Kulsoom, C. Lee, G. Conti, J.A. Copeland, Visualizing network data for intrusion detection, in: Sixth Annual IEEE Information Assurance Workshop - Systems, Man and Cybernetics, SMC, 2005, pp. 100-108.
39. MRTG: The multi router traffic grapher, http://www.mrtg.org. Last access: 18/10/2010.
40. P. Ren, Y. Gao, Z.C. Li, Y. Chen, and B. Watson IDGraphs: intrusion detection and analysis using stream compositing IEEE Computer Graphics and Applications 26 2006 28 39
41. H. Koike, and K. Ohno SnortView: veisualization system of snort logs 2004 ACM Workshop on Visualization and Data Mining for Computer Security 2004 ACM Press Washington DC, USA 143 147
42. K. Abdullah, C.P. Lee, G. Conti, J.A. Copeland, and J. Stasko IDS RainStorm: Visualizing IDS alarms IEEE Workshop on Visualization for Computer Security, VizSEC 05 2005 IEEE Computer Society 1 10
43. A.D. D'Amico, J.R. Goodall, D.R. Tesone, and J.K. Kopylec Visual discovery in computer network defense IEEE Computer Graphics and Applications 27 2007 20 27
44. A. Komlodi, P. Rheingans, A. Utkarsha, J.R. Goodall, and J. Amit A user-centered look at glyph-based security visualization IEEE Workshop on Visualization for Computer Security (VizSEC 05) 2005 IEEE Computer Society 21 28
45. A. Chuvakin Monitoring IDS Information Security Journal: A Global Perspective 12 2004 12 16
46. P. Diaconis, and D. Freedman Asymptotics of graphical projection pursuit The Annals of Statistics 12 1984 793 815
47. R.F. Erbacher, Visual traffic monitoring and evaluation, in: Conference on Internet Performance and Control of Network Systems II, 2001, pp. 153-160.
48. F. Mansmann, D.A. Keim, S.C. North, B. Rexroad, and D. Sheleheda Visual analysis of network traffic for resource planning, interactive monitoring, and interpretation of security threats IEEE Transactions on Visualization and Computer Graphics 13 2007 1105 1112
49. P. Ren, Y. Gao, Z.C. Li, Y. Chen, and B. Watson IDGraphs: Intrusion detection and analysis using histographs IEEE Workshop on Visualization for Computer Security (VizSEC 05) 2005 IEEE Computer Society 39 46
50. R.A. Becker, S.G. Eick, and A.R. Wilks Visualizing network data IEEE Transactions on Visualization and Computer Graphics 1 1995 16 28
51. A. Oline, and D. Reiners Exploring three-dimensional visualization for intrusion detection IEEE Workshop on Visualization for Computer Security, VizSEC 05 2005 IEEE Computer Society 113 120
52. D. Dasgupta, F. Gonzalez, K. Yallapu, J. Gomez, and R. Yarramsettii CIDS: An agent-based intrusion detection system Computers & Security 24 2005 387 398
53. I.M. Hegazy, T. Al-Arif, Z.T. Fayed, and H.M. Faheem A multi-agent based system for intrusion detection IEEE Potentials 22 2003 28 31
54. E.H. Spafford, and D. Zamboni Intrusion detection using autonomous agents Computer Networks: The International Journal of Computer and Telecommunications Networking 34 2000 547 570
55. Cougaar: Cognitive agent architecture, http://cougaar.org/. Last access: 18/10/2010.
56. K. Deeter, K. Singh, S. Wilson, L. Filipozzi, and S. Vuong APHIDS: A mobile agent-based programmable hybrid intrusion detection system First International Workshop on Mobility Aware Technologies and Applications, MATA 2004 2004 Springer Heidelberg 244 253
57. G. Kolaczek, A. Pieczynska-Kuchtiak, K. Juszczyszyn, A. Grzech, R.P. Katarzyniak, and N.T. Nguyen A mobile agent approach to intrusion detection in network systems Knowledge-Based Intelligent Information and Engineering Systems 2005 Springer Heidelberg 514 519
58. A.J. Garvey, and V.R. Lesser Design-to-time real-time scheduling IEEE Transactions on Systems, Man and Cybernetics 23 1993 1491 1502
59. T. Wagner, and V. Lesser Design-to-criteria scheduling: real-time agent control Infrastructure for Agents, Multi-Agent Systems, and Scalable Multi-Agent Systems 2001 Springer Verlag 128 143
60. J.R. Graham, and K. Decker Towards a distributed, environment-centered agent framework 6th International Workshop on Intelligent Agents VI, Agent Theories, Architectures, and Languages (ATAL) 2000 Springer-Verlag 290 304
61. L.C. DiPippo, E. Hodys, B. Thuraisingham, Towards a real-time agent architecture: a whitepaper, in: Fifth International Workshop on Object-Oriented Real-Time Dependable Systems, 1999, pp. 59-64.
62. L. Cingiser DiPippo, V. Fay-Wolfe, L. Nair, E. Hodys, O. Uvarov, A real-time multi-agent system architecture for e-commerce applications, in: 5th International Symposium on Autonomous Decentralized Systems, 2001, pp. 357-364.
63. Real-time CORBA, http://www.omg.org/technology/documents/formal/real- timeCORBA.htm. Last access: 18/10/2010.
64. D.M. Surka, M.C. Brito, C.G. Harvey, The real-time objectagent software architecture for distributed satellite systems, in: IEEE Aerospace Conference 2001, 2001, pp. 2731-2741.
65. K. Prouskas, and J. Pitt Towards a real-time architecture for time-aware agents First International Joint Conference on Autonomous Agents and Multiagent Systems 2002 ACM Bologna, Italy 92 93
66. V.J. Botti, C. Carrascosa, V. Julián, and J. Soler Modelling agents in hard real-time environments 9th European Workshop on Modelling Autonomous Agents in a Multi-Agent World: MultiAgent System Engineering 1999 Springer-Verlag 63 76
67. P. Nit Blackboard systems: the blackboard model of problem-solving and the evolution of blackboard architecture AI Magazine 7 1986 38 53
68. J. Li, and C. Manikopoulos Early statistical anomaly intrusion detection of DOS attacks using MIB traffic parameters IEEE Systems, Man and Cybernetics Society Information Assurance Workshop 2003 IEEE New York 53 59
69. S. Rawat, A.K. Pujari, V.P. Gulati, On the use of singular value decomposition for a fast intrusion detection system, in: First International Workshop on Views on Designing Complex Architectures, VODCA 2004, 2006, pp. 215-228.
70. H.M. El-Bakry, and N. Mastorakis A real-time intrusion detection algorithm for network security WSEAS Transactions on Communications 7 2008 1222 1234
71. X. Guan, W. Wang, and X. Zhang Fast intrusion detection based on a non-negative matrix factorization model Journal of Network and Computer Applications 32 2009 31 44
72. W. Jiang, H. Song, and Y. Dai Real-time intrusion detection for high-speed networks Computers & Security 24 2005 287 294
73. S. Babu, L. Subramanian, J. Widom, A data stream management system for network traffic management, in: Workshop on Network-Related Data Management, NRDM 2001, 2001.
74. Á. Herrero, and E. Corchado Traffic data preparation for a hybrid network IDS Third International Workshop on Hybrid Artificial Intelligence Systems, HAIS 2008 2008 Springer Heidelberg 247 256
75. H. Dreger, A. Feldmann, V. Paxson, and R. Sommer Operational experiences with high-volume network intrusion detection 11th ACM Conference on Computer and Communications Security 2004 ACM Press New York 2 11
76. E. Corchado, and C. Fyfe Connectionist techniques for the identification and suppression of interfering underlying factors International Journal of Pattern Recognition and Artificial Intelligence 17 2003 1447 1466
77. Á. Herrero, E. Corchado, M.A. Pellicer, and A. Abraham MOVIH-IDS: A mobile-visualization hybrid intrusion detection system Neurocomputing 72 2009 2775 2784
78. R.L. King, S.H. Russ, A.B. Lambert, and D.S. Reese An artificial immune system model for intelligent agents Future Generation Computer Systems 17 2001 335 343
79. C. Carrascosa, J. Bajo, V. Julián, J.M. Corchado, and V. Botti Hybrid multi-agent architecture as a real-time problem-solving model Expert Systems with Applications: An International Journal 34 2008 2 17
80. M.E. Bratman Intentions, Plans and Practical Reason 1987 Harvard University Press Cambridge, MA
81. F. Zambonelli, N.R. Jennings, and M. Wooldridge Developing multiagent systems: the Gaia methodology ACM Transactions on Software Engineering and Methodology 12 2003 317 370
82. M. Wooldridge, N.R. Jennings, and D. Kinny The Gaia methodology for agent-oriented analysis and design Autonomous Agents and Multi-Agent Systems 3 2000 285 312
83. M. Navarro, S. Heras, and V. Julián Guidelines to apply CBR in real-time multi-agent systems Journal of Physical Agents 3 2009 39 43
84. J. Bajo, J. Corchado, and S. Rodríguez Intelligent guidance and suggestions using case-based planning Case-Based Reasoning Research and Development 2007 Springer Heidelberg 389 403
85. K.J. Hammond Case-based Planning: Viewing Planning as a Memory Task 1989 Academic Press Professional, Inc.
86. L. Spalzzi A survey on case-based planning Artificial Intelligence Review 16 2001 3 36
87. E. Corchado, D. MacDonald, and C. Fyfe Maximum and minimum likelihood Hebbian learning for exploratory projection pursuit Data Mining and Knowledge Discovery 8 2004 203 225
88. J. Case, M.S. Fedor, M.L. Schoffstall, C. Davin, Simple Network Management Protocol, SNMP, in: IETF RFC 1157, 1990.
89. S. Northcutt, M. Cooper, K. Fredericks, M. Fearnow, and J. Riley Intrusion Signatures and Analysis 2001 New Riders Publishing Thousand Oaks
90. P. Demartines, and J. Herault Curvilinear component analysis: a self-organizing neural network for nonlinear mapping of data sets IEEE Transactions on Neural Networks 8 1997 148 154
91. T. Kohonen The self-organizing map Proceedings of the IEEE 78 1990 1464 1480