Attacking the IDS learning processes

ICASSP, IEEE International Conference on Acoustics, Speech and Signal Processing - Proceedings

Volumn , Issue , 2013, Pages 8687-8691

  Pevny, Tomas ^a   Komon, Martin ^a   Rehaky, Martin ^b  

^a CZECH TECHNICAL UNIVERSITY IN PRAGUE   (Czech Republic)

^b sro   (Czech Republic)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY-BASED INTRUSION DETECTION; ANOMALY-DETECTION ALGORITHMS; DIFFERENT ATTACKS; INTERNAL STATE; LEARNING PROCESS; NETWORK TRAFFIC; STEGANALYSIS;

STEGANOGRAPHY;

SIGNAL PROCESSING;

EID: 84890540035     PISSN: 15206149     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICASSP.2013.6639362     Document Type: Conference Paper

References (15)

1. G. Gu, J. Zhang, and W. Lee, "BotSniffer: Detecting botnet command and control channels in network traffic," in Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS'08), February 2008.
2. K. Borders and A. Prakash, "Quantifying information leaks in outbound web traffic," in Security and Privacy, 8690 2009 30th IEEE Symposium on. May 2009, pp. 129-140, IEEE.
3. Sourcefire, Inc., "SNORT-Intrusion Prevention System," http://www.snort.org/, 2011, Accessed in June 2011.
4. "The Bro Network Security Monitor," http://bro-ids.org/, 2011, Accessed in June 2011.
5. D. Denning, "An intrusion detection model," in IEEE Security and Privacy, 1986.
6. M. Barreno, B. Nelson, R. Sears, A. D. Joseph, and J. D. Tygar, "Can machine learning be secure?," in ASIACCS '06: Proceedings of the 2006 ACM Symposium on Information, computer and communications security, New York, NY, USA, 2006, pp. 16-25, ACM.
7. B.I.P. Rubinstein, B. Nelson, L. Huang, A. D. Joseph, S.H. Lau, S. Rao, N. Taft, and J. D. Tygar, "ANTIDOTE: understanding and defending against poisoning of anomaly detectors," Internet Measurement Conference, pp. 1-14, 2009.
8. T. H. Ptacek and T. N. Newsham, "Insertion, evasion, and denial of service: Eluding network intrusion detection," Tech. Rep., Secure Networks, Inc., Suite 330, 1201 5th Street S.W, Calgary, Alberta, Canada, T2R-0Y6, 1998.
9. R. Polikar, "Esemble based systems in decision making," IEEE Circuits and Systems Mag., vol. 6, no. 3, pp. 21-45, 2006.
10. A. Lakhina, M. Crovella, and C. Diot, "Mining Anomalies using Traffic Feature Distributions," in ACM SIGCOMM, Philadelphia, PA, August 2005, New York, NY, USA, 2005, pp. 217-228, ACM Press.
11. J. Newsome, B. Karp, and D. Song, "Paragraph: Thwarting signature learning by training maliciously," in Recent Advances in Intrusion Detection. 2006, pp. 81-105, Springer.
12. L. Ertoz, E. Eilertson, A. Lazarevic, P. N. Tan, V. Kumar, J. Srivastava, and P. Dokas, "MINDS-Minnesota Intrusion Detection System," in Next Generation Data Mining. 2004, MIT Press.
13. K. Xu, Z.L. Zhang, and S. Bhattacharrya, "Reducing Unwanted Traffic in a Backbone Network," in USENIX Workshop on Steps to Reduce Unwanted Traffic in the Internet (SRUTI), Boston, MA, July 2005.
14. Avinash Sridharan, T. Ye, and Supratik Bhattacharyya, "Connectionless port scan detection on the backbone," in Performance, Computing, and Communications Conference, 2006. IPCCC 2006. 25th IEEE International, april 2006, pp. 10 pp.-576.
15. Martin Rehak, Michal Pechoucek, Karel Bartos, Martin Grill, and Pavel Celeda, "Network intrusion detection by means of community of trusting agents," in IEEE/WIC/ACM International Conference on Intelligent Agent Technology (IAT 2007 Main Conference Proceedings) (IAT'07), Los Alamitos, CA, USA, 2007, IEEE Computer Society.