Distributed intrusion detection systems: A computational intelligence approach

Applications of Information Systems to Homeland Security and Defense

Volumn , Issue , 2005, Pages 107-137

  Abraham, Ajith ^a   Thomas, Johnson ^b  

^a Chung Ang University   (South Korea)

^b OKLAHOMA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84899303295     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.4018/978-1-59140-640-2.ch005     Document Type: Chapter

References (47)

1. Abraham, A. (2003). Intelligent systems: Architectures and perspectives, recent advances in intelligent paradigms and applications. In A. Abraham, L. Jain & J. Kacprzyk (Eds.), Studies in fuzziness and soft computing (pp. 1-35). Germany: Springer Verlag.
2. Bernardes, M.C. & dos Santos Moreira, E. (2000). Implementation of an intrusion detection system based on mobile agents. Proceedings of the International Symposium on Software Engineering for Parallel and Distributed Systems (pp. 158-164).
3. Breiman, L., Friedman, J., Olshen, R., Stone, C. (1984). Classification and regression trees. New York: Chapman and Hall.
4. Chebrolu, S., Abraham, A., & Thomas, J. (2004). Feature deduction and ensemble design of intrusion detection systems. Computers and Security, Elsevier Science (in press).
5. Debar, M., Becke, D., & Siboni, A. (1992). A neural network component for an intrusion detection system. Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy.
6. DeMara, R.F., & Rocke, A.J. (2004). Mitigation of network tampering using dynamic dispatch of mobile agents. Computers & Security, 23, 31-42.
7. Denning, E. (1997, February). An intrusion detection model. In IEEE Transactions on Software Engineering (pp. 222-228).
8. Dunigan, T., & Hinkel, G. (1999). Intrusion detection and intrusion prevention on a large network: A case study. Proceedings of a Workshop on Intrusion Detection and Network Monitoring.
9. Feiertag, R., Rho, S., Benzingher, L., Wu, S., Redmond, R., Zhang, C., Levitt, K., Peticolas, D., Heckman, M., Staniford, S., & McAlerney, J. (2000). Intrusion detection inter-component adaptive negotiation. Computer Networks, 34, 605-621.
10. Forrest, S., Hofmeyr, S.A., & Somayaji, A. (1997). Computer immunology. CACM, 40(10), 88-96.
11. Friedman, J.H. (1991). Multivariate adaptative regression splines. Annals of Statistics, 19.
12. Garvey, T.D., & Lunt, T.F. (1991, October). Model based intrusion detection. Proceedings of the 14th National Computer Security Conference (pp. 372-385).
13. Helmer, G., Wong, J., Honavar, V., & Miller, L. (1998). Intelligent agents for intrusion detection. Retrieved from http://citeseer.nj.nec.com/helmer98intelligent.html
14. Helmer, G., Wong, J.S.K, Honavar, V., Miller, L., & Wang, Y. (2003). Lightweight agents for intrusion detection. The Journal of Systems and Software, 67, 109-122.
15. Ilgun, K. (1993). USTAT: A real-time intrusion detection system for UNIX. Proceedings of the 1993 Computer Society Symposium on Research in Security and Privacy (pp. 16-28).
16. Jansen, W., Mell, P., Karygiannis, T., & Marks, D. (1999). Applying mobile agents to intrusion detection and response. National Institute of Standards and Technology, Computer Security Division. Retrieved from http://csrc.nist.gov/publications/nistir/ir6416.pdf
17. Jou, Y.F., Gong, F., Sargor, C., Wu, X., Wu, S.F., Chang, H.C., Wang, F. (2000). Design and implementation of a scalable intrusion detection system for the protection of network infrastructure. DARPA Information Survivability Conference and Exposition.
18. Kapoor, B. (2000). Remote misuse detection system using mobile agents and relational database query techniques (master's thesis). University of Central Florida.
19. KDD cup 99 Intrusion detection data set. Retrieved October 25, 2004, from http://kdd.ics.uci.edu/databases/kddcup99/kddcup.data_10_percent.gz
20. Kemmerer, R.A. (1997). NSTAT: A model-based real-time network intrusion detection system. Technical Report TRCS97-18, Department of Computer Science. Santa Barbara: University of California.
21. Kruegel, C., & Toth, T. (2001). Applying mobile agent technology to intrusion detection. Proceedings of the ICSE Workshop on Software Engineering and Mobility. Retrieved from http://citeseer.nj.nec.com/kr01applying.html
22. Kumar, S. (1995, August). Classification and detection of computer intrusions (PhD thesis). Purdue University.
23. Kumar, S., & Spafford, E.H. (1994). An application of pattern matching in intrusion detection. Technical Report CSD-TR-94-013. Purdue University.
24. Lee, W., Nimbalker, R.A., Yee, K.K., Patil, S.B., Desai, P.H., Tran, P.P., & Stolfo, S.J. (2000). A data mining and CIDF based approach for detecting novel and distributed intrusions. Proceedings of the 3rd International Workshop on Recent Advances in Intrusion Detection.
25. Lee, W., Stolfo, S., & Mok, K. (1999). A data mining framework for building intrusion detection models. Proceedings of the IEEE Symposium on Security and Privacy.
26. Lu, J. (2000). Mobile agent protocols for distributed detection of network intrusions (Master's thesis). University of Central Florida.
27. Mouinji, A., Charlier, B.L., Zampunieris, D., & Habra, N. (1995). Distributed audit trail analysis. Proceedings of the ISOC 95 Symposium on Network and Distributed System Security (pp. 102-112).
28. Mukherjee, B., Heberlein, L.T., & Levitt, K.N. (1994). Network intrusion detection. IEEE Network, 8(3), 26-41.
29. Mukkamala, S., Sung, A.H., & Abraham, A. (2003). Intrusion detection using ensemble of soft computing paradigms. Proceedings of the Third International Conference on Intelligent Systems Design and Applications. Advances in Soft Computing (pp. 239-248). Germany: Springer Verlag.
30. Mukkamala, S., Sung, A.H., & Abraham, A. (2004).Modeling intrusion detection systems using linear genetic programming approach. In R. Orchard, C. Yang, & M. Ali (Eds.), Proceedings of the 17th International Conference on Industrial & Engineering Applications of Artificial Intelligence and Expert Systems, Innovations in Applied Artificial Intelligence. Lecture Notes in Computer Science 3029 (pp. 633-642). Germany: Springer Verlag.
31. Mukkamala, S., Sung, A.H., Abraham, A., & Ramos, V. (2004). Intrusion detection systems using adaptive regression splines. In I. Seruca, J. Filipe, S. Hammoudi, & J. Cordeiro (Eds.), Proceedings of the 6th International Conference on Enterprise Information Systems. ISBN 972- 8865-00-7 (vol. 3, pp. 26-33).
32. Ning, P, Jajodia, S., & Wang, X.S. (2002). Design and implementation of a decentralized prototype system for detecting distributed attacks. Computer Communications, 25, 1374-1391.
33. Peddabachigari, S., Abraham, A., & Thomas, J. (2004). Intrusion detection systems using decision trees and support vector machines. International Journal of Applied Science and Computations (in press).
34. Porras, P.A. (1992, July). STAT: A State Transition Analysis Tool for intrusion detection (masters thesis). Computer Science Dept. Santa Barbara: University of California.
35. Porras, P.A., & Neumann, P.G. (1997). EMERALD: Event Monitoring Enabling Response to Anomalous Live Disturbances. Proceedings of the 20th National Information Security Conference.
36. Shah, K., Dave, N., Chavan, S., Mukherjee, S., Abraham, A., & Sanyal, S. (2004). Adaptive neuro-fuzzy intrusion detection system. Proceedings of the IEEE International Conference on Information Technology: Coding and Computing. IEEE Computer Society, 1 (pp. 70-74).
37. Snapp, S.R., Bretano, J., Diaz, G.V., Goan, T.L., Heberlain, L.T., Ho, C., Levitt, K.N., Mukherjee, B., Smaha, S.E., Grance, T., Teal, D.M., Mansur, D. (1999). DIDS - motivation architecture and an early prototype. Proceedings of the 14th National Computer Security Conference (pp. 167-176).
38. Spafford, E.H., & Zamboni, D. (2000). Intrusion detection using autonomous agents. Computer Networks, 34, 547-570.
39. Staniford-Chen, S., Cheung, S., Crawford, R., Dilger, M., Frank, J., Hoagland, J., Levitt, K., Wee, C., Yipi, R., & Erkle, D.Z. (1996). GriDS - a large scale intrusion detection system for large networks. Proceedings of the 19th National Information Security Conference (vol. 1, pp. 361-370).
40. Staniford-Chen, S., Tung, S.B., & Schnackenberg, D. (1998, October). The Common Intrusion Detection Framework (CIDF). Proceedings of the Information Survivability Workshop.
41. Stolfo, S.J., Prodromidis, A.L., Tselepis, S., Lee, W., Fan, D., & Chan, P.K. (1997). JAM: Java Agents for Meta-learning over distributed databases. Proceedings of the Third International Conference on Knowledge Discovery and Data Mining (pp. 74-81).
42. Teng, H.S., Chen, K., & Lu, S.C. (1990). Security audit trail analysis using inductively generated predictive rules. Proceedings of the 11th National Conference on Artificial Intelligence Applications (pp. 24-29).
43. Tsamardinos, I., Aliferis, C.F., & Statnikov, A. (2003). Time and sample efficient discovery of Markov blankets and direct causal relations. Proceedings of the 9th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (pp. 673-678).
44. Vapnik, V.N. (1995). The nature of statistical learning theory. Springer.
45. Vigna, G., & Kemmerer, R.A. (1999). NetSTAT: A network-based intrusion detection system. Journal Computer Security, 7(1), 37-71.
46. White, G.B., Fisch, E.A., & Wpooch, U. (1996). Cooperating security managers: a peer-based intrusion detection system. IEEE Networks.
47. Wiser, L. (2004). Intrusion detection and homeland security: Ask the expert. Retrieved October 25, 2004, from www2.cio.com/ask/expert/2002/questions/question1522.html?CATEGORY=15&NAME=Internet