An Adaptive Automatically Tuning Intrusion Detection System

ASIA unversity > 資訊學院 > 生物資訊與醫學工程學系 > 期刊論文 > Item 310904400/4762

請使用永久網址來引用或連結此文件: http://asiair.asia.edu.tw/ir/handle/310904400/4762

題名:	An Adaptive Automatically Tuning Intrusion Detection System
作者:	Jeffrey J. P. Tsai;Z. Yu;T. Weigert
日期:	2008-09
上傳時間:	2009-12-02 01:04:04 (UTC+0)
出版者:	Asia University
摘要:	An intrusion detection system (IDS) is a security layer to detect ongoing intrusive activities in computer systems and networks. Current IDS have two main problems: The first problem is that typically so many alarms are generated as to overwhelm the system operator, many of these being false alarms. The second problem is that continuous tuning of the intrusion detection model is required in order to maintain sufficient performance due to the dynamically changing nature of the monitored system. This manual tuning process relies on the system operators to work out the updated tuning solution and to integrate it into the detection model. In this article, we present an automatically tuning intrusion detection system, which controls the number of alarms output to the system operator and tunes the detection model on the fly according to feedback provided by the system operator when false predictions are identified. This system adapts its behavior (i) by throttling the volume of alarms output to the operator in response to the ability of the operator to respond to these alarms, and (ii) by deciding how aggressively the detection model should be tuned based on the accuracy of earlier predictions. We evaluated our system using the KDDCup'99 intrusion detection dataset. Our results show that an adaptive, automatically tuning intrustion detection system will be both practical and efficient.
關聯:	ACM Transactions on Autonomous and Adaptive Systems 3(3)
顯示於類別:	[生物資訊與醫學工程學系 ] 期刊論文

文件中的檔案:

檔案	描述	大小	格式	瀏覽次數
		0Kb	Unknown	978	檢視/開啟
310904400-4762.doc		34Kb	Microsoft Word	617	檢視/開啟

在ASIAIR中所有的資料項目都受到原著作權保護.

資料載入中.....