Utilizing statistical characteristics of N-grams for intrusion detection

Proceedings - 2003 International Conference on Cyberworlds, CW 2003

Volumn , Issue , 2003, Pages 486-493

  Zhuowei, Li ^a   Das, Amitabha ^a   Nandi, Sukumar ^a  

^a NANYANG TECHNOLOGICAL UNIVERSITY   (Singapore)

Author keywords

[No Author keywords available]

Indexed keywords

EFFICIENCY; MERCURY (METAL);

ANOMALY-BASED INTRUSION DETECTION; EFFICIENCY PARAMETERS; INFRASTRUCTURE SECURITY; NETWORK ENVIRONMENTS; SECURITY INFRASTRUCTURE; STATISTICAL ANOMALY DETECTION; STATISTICAL CHARACTERISTICS; STATISTICAL PROPERTIES;

INTRUSION DETECTION;

EID: 84946216263     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CYBER.2003.1253494     Document Type: Conference Paper

References (12)

1. S. Forrest, S. Hofmeyr, A. Somayaji, and T. Longstaff. A sense of self for Unix processes. In Proceedinges of the 1996 IEEE Symposium on Research in Security and Privacy, pages 120-128. IEEE Computer Society Press, 1996.
2. S. Hofmeyr, S. Forrest, and A. Somayaji. Intrusion detection using sequences of system calls. Journal of Computer Security, 6(3):151-180, 1998.
3. W. Lee and S. Stolfo. Data mining approaches for intrusion detection. In Proceedings of the 7th USENIX Security Symposium, San Antonio, TX, 1998.
4. C. Marceau. Characterizing the behavior of a program using multiple-length n-grams. In Proceedings of the 2000 workshop on New security paradigms, pages 101-110. ACM Press, 2000.
5. R. Maxion and K. Tan. Benchmarking anomaly-based detection systems. In Proceedings of the 1st International Conference on Dependable Systems & Networks 2000, pages 623-630, Los Alamitos, California, 2000.
6. R. Power. Computer security issues&trends. 2002 CSI/FBI computer crime and security survey, Computer Security Institute, 600 Harrison St. San Francisco CA 94107, 2002.
7. R.S.Puttini, Z. Marrakchi, and L. Më. A bayesian classification model for real-time intrusion detection. In the 22nd International Workshop on Bayesian Inference and Maximum Entropy Methods in Science and Engineering, MAXENT, 2002.
8. S. Scott. A bayesian paradigm for designing network intrusion systems. To appear in Computational Statistics and Data Analysis (special issue on network intrusion detection), June 20 2002.
9. R. Sekar, M. Bendre, D. Dhurjati, and P. Bollineni. A fast automaton-based method for detecting anomalous program behaviors. In Proceedings of the 2000 IEEE Symposium on Security and Privacy, pages 144-155, 2000.
10. M. Stillerman, C. Marceau, and M. Stillman. Intrusion detection for distributed applications. Communications of the ACM, 42(7):62-69, 1999.
11. C. Warrender, S. Forrest, and B. Pearlmutter. Detecting intrusions using system calls: Alternative data models. In IEEE Symposium on Security and Privacy, pages 133-145, 1999.
12. N. Ye. A markov chain model of temporal behavior for anomaly detection. In Proceedings of the 2000 IEEE Systems, Man, and Cybernetics Information Assurance and Security Workshop, 2000, pages 171-174, 2000.