A study in using neural networks for anomaly and misuse detection

8th USENIX Security Symposium

Volumn , Issue , 1999, Pages

  Ghosh, Anup K ^a   Schwartzbard, Aaron ^a  

^a Cigital   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; COMPUTER CRIME; NEURAL NETWORKS;

ADVANCED RESEARCHES; INTRUSION DETECTION APPROACHES; INTRUSION DETECTION SYSTEMS; LARGE CORPORA; MISUSE DETECTION;

INTRUSION DETECTION;

EID: 85084160308     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. J.P. Anderson. Computer security threat monitoring and surveillance. Technical Report Technical Report, James P. Anderson Co., Fort Washington, PA, April 1980.
2. J. Cannady. Artificial neural networks for misuse detection. In Proceedings of the 1998 National Information Systems Security Conference (NISSC'98), pages 443-456, October 5-8 1998. Arlington, VA.
3. W.W. Cohen. Fast effective rule induction. In Machine Learning: Proceedings of the Twelfth International Conference. Morgan Kaufmann, 1995.
4. P. D'haeseleer, S. Forrest, and P. Helman. An immunological approach to change detection: Algorithms, analysis and implications. In IEEE Symposium on Security and Privacy, 1996.
5. D. Endler. Intrusion detection: Applying machine learning to solaris audit data. In Proceedings of the 1998 Annual Computer Security Applications Conference (ACSAC'98), pages 268-279, Los Alamitos, CA, December 1998. IEEE Computer Society, IEEE Computer Society Press. Scottsdale, AZ.
6. S. Forrest, S.A. Hofmeyr, and A. Somayaji. Computer immunology. Communications of the ACM, 40(10):88-96, October 1997.
7. T.D. Garvey and T.F. Lunt. Mo del-based intrusion detection. In Proceedings of the 14th National Computer Security Conference, October 1991.-
8. A.K. Ghosh, A. Schwartzbard, and M. Schatz. Learning program b ehavior profiles for intrusion detection. In Proceedings of the 1st USENIX Workshop on Intrusion Detection and Network Monitoring. USENIX Association, April 11-12 1999. To appear.
9. A.K. Ghosh, A. Schwartzbard, and M. Schatz. Using program b ehavior profiles for intrusion detection. In Proceedings of the SANS Intrusion Detection Workshop, February 1999. To appear.
10. A.K. Ghosh, J. Wanken, and F. Charron. Detecting anomalous and unknown intrusions against programs. In Proceedings of the 1998 Annual Computer Security Applications Conference (ACSAC'98), December 1998.
11. K. Ilgun. Ustat: A real-time intrusion detection system for unix. Master's thesis, Computer Science Dept, UCSB, July 1992.
12. K. Ilgun, R.A. Kemmerer, and P.A. Porras. State transition analysis: A rule-based intrusion detection system. IEEE Transactions on Software Engineering, 21(3), March 1995.
13. S. Kumar and E.H. Spafford. A pattern matching mo del for misuse intrusion detection. The COAST Project, Purdue University, 1996.
14. T. Lane and C.E. Brodley. An application of machine learning to anomaly detection. In Proceedings of the 20th National Information Systems Security Conference, pages 366-377, October 1997.
15. W. Lee, S. Stolfo, and P.K. Chan. Learning patterns from unix process execution traces for intrusion detection. In Proceedings of AAAI97 Workshop on AI Methods in Fraud and Risk Management, 1997.
16. T.F. Lunt. Ides: an intelligent system for detecting intruders. In Proceedings of the Symposium: Computer Security, Threat and Countermeasures, November 1990. Rome, Italy.
17. T.F. Lunt. A survey of intrusion detection techniques. Computers and Security, 12:405-418, 1993.
18. T.F. Lunt and R. Jagannathan. A proto type real-time intrusion-detection system. In Proceedings of the 1988 IEEE Symposium on Security and Privacy, April 1988.
19. T.F. Lunt, A. Tamaru, F. Gilham, R. Jagannthan, C. Jalali, H.S. Javitz, A. Valdos, P.G. Neumann, and T.D. Garvey. A real-time intrusion-detection exp ert system (ides). Technical Report, Computer Science Lab oratory, SRI Internationnal, February 1992.
20. F. Monrose and A. Rubin. Authentication via keystroke dynamics. In 4th ACM Conference on Computer and Communications Security, April 1997.
21. P.A. Porras and R.A. Kemmerer. Penetration state transition analysis - a rule-based intrusion detection approach. In Eighth Annual Computer Security Applications Conference, pages 220-229. IEEE Computer So ciety Press, November 1992.
22. P.A. Porras and P.G. Neumann. Emerald: Event monitoring enabling resp onses to anomalous live disturbances. In Proceedings of the 20th National Information Systems Security Conference, pages 353-365, October 1997.
23. G. Vigna and R.A. Kemmerer. Netstat: A network-based intrusion detection approach. In Proceedings of the 1998 Annual Computer Security Applications Conference (ACSAC'98), pages 25-34, Los Alamitos, CA, December 1998. IEEE Computer Society, IEEE Computer Society Press. Scottsdale, AZ.