Remote attack detection method in IDA: MLSI-based intrusion detection using discriminant analysis

Proceedings - 2002 Symposium on Applications and the Internet, SAINT 2002

Volumn , Issue , 2002, Pages 64-73

  Asaka, M ^a   Onabura, T ^a   Inoue, T ^a   Goto, S ^b  

^a Information technology Promotion Agency Japan   (Japan)

^b WASEDA UNIVERSITY   (Japan)

Author keywords

Internet; Intrusion detection

Indexed keywords

DISCRIMINANT ANALYSIS; INTERNET; MERCURY (METAL); MONITORING;

CLASSIFICATION FUNCTIONS; NON-INTRUSIVE; REMOTE ATTACKS; SYSTEM CALLS;

INTRUSION DETECTION;

EID: 84950109260     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SAINT.2002.994451     Document Type: Conference Paper

References (17)

1. http://www.ipa.go.jp/STC/ida
2. M. Asaka, "Information-Gathering with Mobile Agents for an Intrusion Detection System", Systems and Computers in Japan, Vol. 30 No. 2, pp. 31 - pp. 37, Feb. 1999.
3. M. Asaka, M. Tsuchiya, T. Onabuta, S. Okazawa, and S. Goto, "Local Attack Detection and Intrusion Route Tracing", IEICE Trans. Commun., Vol. E82-B No. 11, pp. 1826-1833, Nov. 1999.
4. S. Forrest, S. A. Hofmeyr, A. Somayaji, and T. A. Longstaff, "A sense of self for Unix processes", Proc. IEEE Symposium on Computer Security and Privacy, 1996.
5. S. A. Hofmeyr, A. Somayaji, and S. Forrest, "Intrusion detection using sequences of system calls", Computer Security Vol. 6, pp 151-180, 1998.
6. C. Ko, G. Fink, K. Levitt, "Automated detection of vulnerabilities in privileged programs by execution monitoring". Proc. of the 10th Annual Computer Security Applications Conference, pp. 134-144, Orlando, FL, 5-9 Dec. 1994.
7. C. Ko, M. Ruschitzka, and K. Levitt, "Execution monitoring of security-critical programs in distributed systems: a specification-based Approach", Proc. IEEE Symposium on Security and Privacy, pp. 134-144, 1997.
8. R. A. Fisher, "The Statistical Utilization of Multiple Measurements." Annals of Eugenics, 8 pp. 376-386, 1938.
9. R. A. Johnson and D. W. Wichern, "Applied multivariate statistical analysis", Fourth Edition, Prentice Hall, New Jersey, 1998.
10. http://www.esumi.co.jp
11. M. Asaka et al., "A New Intrusion Detection Method Based on Discriminant Analysis", IEICE Trans, on Information & Systems, Vol. E-84-B No. 5, pp. 570-577, May 2001.
12. P. A. Lachenbruch and M. R. Mickey, "Estimation of Error Rate in Discriminant Analysis." Technometrics, 10, no. 1 pp. 1-10, 1968.
13. K. Ilgun, R. A. Kemmerer, and P. A. Porras, "State Transition Analysis: A Rule-Based Intrusion Detection Approach", IEEE Trans. Software Engineering, Vol. 21, No. 3, pp. 181-199, 1995
14. T. Onabuta, T. Inoue, and M. Asaka, "The Study of Security Mechanism for Intrusion Detection Systems", Techinical Report of IEICE. ISEC2000-48, 2000
15. G. Box and D. Cox, "An analysis of transformations", J. Royal Statistical Society (B), 26, no. 2 pp. 211-252. 1964
16. D. E. Denning, '"An Intrusion-Detection Model", IEEE Trans. Engineering, Vol. SE-13. No. 2, pp. 222-232, 1987.
17. B. Mukherjee, L. T. Heberlein, and K. N. Levitt, "Network intrusion detection", IEEE Network, vol. 8, No. 3, May/June pp. 26-41, 1994