An Adaptive Automatically Tuning Intrusion Detection System

ASIA unversity > 資訊學院 > 生物資訊與醫學工程學系 > 期刊論文 > Item 310904400/4762

jsp.display-item.identifier=請使用永久網址來引用或連結此文件: http://asiair.asia.edu.tw/ir/handle/310904400/4762

题名:	An Adaptive Automatically Tuning Intrusion Detection System
作者:	Jeffrey J. P. Tsai;Z. Yu;T. Weigert
日期:	2008-09
上传时间:	2009-12-02 09:04:04 (UTC+8)
出版者:	Asia University
摘要:	An intrusion detection system (IDS) is a security layer to detect ongoing intrusive activities in computer systems and networks. Current IDS have two main problems: The first problem is that typically so many alarms are generated as to overwhelm the system operator, many of these being false alarms. The second problem is that continuous tuning of the intrusion detection model is required in order to maintain sufficient performance due to the dynamically changing nature of the monitored system. This manual tuning process relies on the system operators to work out the updated tuning solution and to integrate it into the detection model. In this article, we present an automatically tuning intrusion detection system, which controls the number of alarms output to the system operator and tunes the detection model on the fly according to feedback provided by the system operator when false predictions are identified. This system adapts its behavior (i) by throttling the volume of alarms output to the operator in response to the ability of the operator to respond to these alarms, and (ii) by deciding how aggressively the detection model should be tuned based on the accuracy of earlier predictions. We evaluated our system using the KDDCup'99 intrusion detection dataset. Our results show that an adaptive, automatically tuning intrustion detection system will be both practical and efficient.
關聯:	ACM Transactions on Autonomous and Adaptive Systems 3(3)
显示于类别:	[Department of Biomedical informatics ] Journal Article

文件中的档案:

档案	描述	大小	格式	浏览次数
		0Kb	Unknown	906	检视/开启
310904400-4762.doc		34Kb	Microsoft Word	594	检视/开启

在ASIAIR中所有的数据项都受到原著作权保护.

数据加载中.....