Discovering fuzzy association rule patterns and increasing sensitivity analysis of XML-related attacks

Journal of Network and Computer Applications

Volumn 36, Issue 2, 2013, Pages 829-842

  Chan, Gaik Yee ^a   Lee, Chien Sing ^a,b   Heng, Swee Huay ^a  

^a MULTIMEDIA UNIVERSITY   (Malaysia)

^b NATIONAL CENTRAL UNIVERSITY   (Taiwan)

Author keywords

Business intelligence; e commerce; Fuzzy association rules; Intrusion detection; Intrusion prevention

Indexed keywords

ATTACK PATTERNS; BUFFER OVERFLOWS; BUSINESS POLICIES; CLASSIFICATION ACCURACY; DATA SET; DECISION OUTCOME; E-COMMERCE APPLICATIONS; FALSE ALARM RATE; FEATURES SELECTION; FUZZY ASSOCIATION RULE; INCREASING SENSITIVITIES; INTRUSION PREVENTION; NETWORK-BASED INTRUSION DETECTION; PATTERNS MATCHING; PREDICTION RATE; RANDOM FORESTS; SAMPLE SIZES; SECURITY ADMINISTRATOR; SECURITY PROTECTION; SQL INJECTION; WEB APPLICATION ATTACKS;

CLASSIFICATION (OF INFORMATION); COMPETITIVE INTELLIGENCE; COMPUTER SIMULATION; DECISION TREES; ELECTRONIC COMMERCE; INTRUSION DETECTION; NETWORK LAYERS; WEB SERVICES; WEBSITES; XML;

FUZZY RULES;

EID: 84874750531     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2012.11.006     Document Type: Article

References (34)

1. A. Andreu Professional pen testing for web applications 2006 Wiley Publishing Inc. Indianapolis
2. Agrawal R, Imielinski T, Swami A. Mining association rules between sets of items in large databases. In: Proceedings of the ACM SIGMOD conference on management of data; 1993. p. 207-16.
3. Agrawal R, Srikant R. Fast algorithms for mining association rules. In: Proceedings of the 20th international conference on very large databases; 1994. p. 487-99.
4. Bai Y, Kobayashi H. Intrusion detection systems: technology and development. In: Proceedings of the 17th International conference on advanced information networking and applications (AINA); 2003. p. 710-15.
5. L. Breiman Random forests Machine Learning 45 1 2001 5 32
6. Chan GY, Lee CS, Heng SH. Policy-enhanced ANFIS model to counter SOAP-related attacks. knowledge-based systems 2012;35:64-76
7. M. Delgado, N. Marin, D. Sanchez, and M.A. Vila Fuzzy association rules: general model and applications IEEE Transactions on Fuzzy Systems 11 2 2003 214 225
8. C. Gu, S. Zhang, and X. Xue Network intrusion detection based on improved proximal SVM Advances in Information Sciences and Service Sciences 3 4 2011 132 140
9. M. Jensen, N. Gruschka, and R. Herkenḣoner A survey of attacks on web services Journal of Computer Science - Research and Development 24 4 2009 185 197
10. M.M.T. Jawhar, and M. Mehrotra Design network intrusion detection system using hybrid fuzzy-neural network International Journal of Computer Science and Security 4 3 2010 285 294
11. W. Lee, S.J. Stolfo, and K.W. Mok Adaptive intrusion detection: a data mining approach Artificial Intelligence Review 14 6 2000 533 567
12. Lee W, Stolfo SJ, Philip K, Chan PK, Eskin E, Fan W, et al. Real time data mining-based intrusion detection. In: Proceedings of the DARPA information survivability conference and exposition II (DISCEX); 2001. p. 89-100.
13. Li P, Liu L, Gao D, Reiter MK. On challenges in evaluating malware clustering. In: 13th international symposium on recent advances in intrusion detection, (RAID), LNCS 6307; 2010. p. 238-55.
14. Lindstrom P. Attacking and defending web services. A spire research report. Available from: 〈http://www.forumsys.com/resources/resources/ whitepapers/Attacking-and-Defending-WS.pdf〉; 2004.
15. Loh YS, Yau WC, Wong CT, Ho WC. Design and implementation of an XML firewall. In: Proceedings of the 2006 international conference on computational intelligence and security (CIS2006); 2006. p. 1147-50.
16. S. Mabu, C. Chen, N. Lu, and K. Shimada An intrusion-detection model based on fuzzy class- association-rule mining using genetic network programming IEEE Transactions on Systems, Man, and Cybernetics-Part C: Applications and Reviews 41 1 2011 130 139
17. T. Ozyer, R. Alhajj, and K. Barker Intrusion detection by integrating boosting genetic fuzzy classifier and data mining criteria for rule pre-screening Journal of Network and Computer Applications 30 1 2007 99 113
18. S. Peddabachigari, A. Abraham, C. Grosan, and J. Thomas Modeling intrusion detection system using hybrid intelligent systems Journal of Network and Computer Applications 30 1 2007 114 132
19. C.I. Pinzón, J. Bajo, J.F. De Paz, and J.M. Corchado S-MAS: an adaptive hierarchical distributed multi-agent architecture for blocking malicious SOAP messages within web services environments Expert Systems with Applications 38 2011 5486 5499
20. M. Sheikhan, and Z. Jadidi Misuse detection using hybrid of association rule mining and connectionist modeling World Applied Sciences Journal 7 2009 31 37 [special Issue of Computer and IT]
21. M. Sheikhan, and M.S. Rad Misuse detection based on feature selection by fuzzy association rule mining World Applied Sciences Journal 10 2010 32 40 [special Issue of Computer and Electrical Engineering]
22. M.Y. Su Using clustering to improve the KNN-based classifiers for online anomaly network traffic identification Journal of Network and Computer Applications 34 2 2011 722 730
23. U. Thakar, N. Dagdee, and S. Varma Pattern analysis and signature extraction for intrusion attacks on web services International Journal of Network Security and Its Applications (IJNSA) 2 3 2010 190 205
24. A. Tajbakhsh, M. Rahmati, and A. Mirzaei Intrusion detection using fuzzy association rules Applied Soft Computing 9 2009 462 469
25. Toosi AN, Kahani M. A novel soft computing model using adaptive neuro-fuzzy inference system for intrusion detection. In: Proceedings of the 2007 IEEE international conference on networking, sensing and control. London, UK; 2007. p. 834-9.
26. Wang X, He F. Improving intrusion detection performance using rough set theory and association rule mining. In: Proceedings of IEEE computer society international conference on hybrid information technology (ICHIT); 2006. p. 114-9.
27. Wu KX, Hao J, Wang CH. Intrusion detection based on fuzzy association rules. In: Proceedings of the 2010 international symposium on intelligence information processing and trusted computing; 2010. p. 200-3.
28. WEKA software weka-3-6-4jre.exe. 〈http://www.cs.waikato.ac.nz/ml/ weka/〉. Downloaded in December 2010.
29. Ye X. Countering DDoS and XDoS attacks against web services. In: Proceedings of IEEE/IFIP international conference on embedded and ubiquitous computing; 2008. p. 346-52.
30. Y. Ye, T. Li, K. Huang, Q. Jiang, and Y. Chen Hierarchical associative classifier (HAC) for malware detection from the large and imbalanced gray list Journal of Intelligent Information Systems 35 1 2010 1 20
31. Zhang J, Zulkernine M. Anomaly based network intrusion detection with unsupervised outlier detection. In: Proceedings of IEEE international conference on communications (ICC); 2006. p. 2388-93.
32. J. Zhang, M. Zulkernine, and A. Haque Random-forests-based network intrusion detection systems IEEE Transactions on Systems, Man and Cybernetics Part C: Applications and Reviews 38 5 2008 649 659
33. A. Zainal, M.A. Maarof, and S.M. Shamsuddin Ensemble classifiers for network intrusion detection system Journal of Information Assurance and Security 4 2009 217 225
34. wsKnight. 〈http://net-square.com/wschess/index.html〉. Downloaded in July 2008.