Statistical traffic modeling for network intrusion detection

Proceedings - IEEE Computer Society's Annual International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunications Systems, MASCOTS

Volumn 2000-January, Issue , 2000, Pages 466-473

  Cabrera, João B D ^a   Ravichandran, B ^a   Mehra, Raman K ^a  

^a Scientific Systems Company   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPLEX NETWORKS; COMPLEXATION; DENIAL-OF-SERVICE ATTACK; ERRORS; MERCURY (METAL); STATISTICAL TESTS; TRANSMISSION CONTROL PROTOCOL;

APPLICATION MODELS; APPLICATION PROTOCOLS; DENIAL OF SERVICE; KOLMOGOROV-SMIRNOV TEST; NETWORK ACTIVITIES; NETWORK INTRUSION DETECTION; RECEIVER OPERATING CHARACTERISTICS; TRAFFIC ACTIVITIES;

INTRUSION DETECTION;

EID: 84949751558     PISSN: 15267539     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MASCOT.2000.876573     Document Type: Conference Paper

References (15)

1. L. Breiman. Probability and Stochastic Processes With a View Toward Applications. Houghton Mifflin Company, 1969.
2. J. B. D. Cabrera, B. Ravichandran, and R. K. Mehra. Data Classification and Data Clustering Algorithms for Intrusion Detection on Computer Networks. Technical Report AFRL-IS-TR-2000-51, Air Force Research Laboratory, Information Directorate, Rome, NY, April 2000.
3. W. W. Daniel. Biostatistics: A Foundation for Analysis in the Health Sciences. John Wiley & Sons, Inc., 1974.
4. Emerald Project. EMERALD TCP Statistical Analyzer 1998 Evaluation Results, 1999. available at http://www.sdl.sri.com/emerald/98-eval-estat/index.html.
5. S. Floyd and V. Paxson. Why we don't know how to simulate the Internet, October 1999. Available at http://www.aciri.org/floyd/papers.html.
6. I. Graf, R. Lippmann, R. Cunningham, D. Fried, K. Kendall, S. Webster, and M. Zissman. Results of DARPA 1998 Offline Intrusion Detection Evaluation, December 1998. DARPA PI Meeting slides - Available at http://ideval.ll.mit.edu.
7. K. Kendall. A database of computer attacks for the evaluation of intrusion detection systems. Master's thesis, Massachusetts Institute of Technology, June 1999.
8. W. Lee, S. J. Stolfo, and K. W. Mok. A data mining framework for building intrusion detection models. In Proceedings of the IEEE Symposium on Security and Privacy, 1999.
9. W. Lee, S. J. Stolfo, and K. W. Mok. Mining in a dataflow environment: Experience on network intrusion detection. In Proceedings of the Confererence on Knowledge Discovery on Databases, 1999.
10. R. P. Lippmann, R. Cunningham, D. Fried, S. Garfinkel, G. A. I. Graf, K. Kendall, D. McClung, D. Weber, S. Webster, D. Wyschogrod, and M. Zissmann. MIT Lincoln Laboratory Offline Component of DARPA 1998 Intrusion Detection Evaluation, December 1998. DARPA PI Meeting slides - Available at http://ideval.ll.mit.edu.
11. G. E. Noether. Elements of Nonparametric Statistics. John Wiley & Sons, 1967.
12. V. Paxson. Empirically-derived analytic models of wide- Area TCP connections. IEEE/ACM Transactions on Networking, 2(4):316-336, August 1994.
13. V. Paxson and S. Floyd. Wide-area traffic: The failure of Poisson modeling. IEEE/ACM Transactions on Networking, 3(3):226-244, June 1995.
14. R. Power. CSI roundtable: Experts discuss present and future intrusion detection systems. Computer Security Journal, 10(1), 1998.
15. H. L. van Trees. Detection, Estimation, and Modulation Theory - Part I: Detection, Estimation, and Linear Modulation Theory. John Wiley & Sons, 1968.