Anomaly Intrusion Detection

Paper Summary:

This paper is a research project, which uses anomaly intrusion detection to determine if there are any abnormal patterns and, hence, intrusions in the provided log files. The author stresses that a statistics approach seems to be the easiest and most straightforward approach. The paper relates that a common practice in IDS software is to incorporate different techniques to detect intrusion so that other methods such as hierarchical clustering can still be included in the system to search for suspicious/ known data patterns such as viruses. The paper includes charts, graphs and a screen-shot.

From the Paper:

"Since we are not building a new system, we will try to implement and base the report on existing work. Viewing sequence algorithms for intrusion detection helps to determine which patterns look like patterns of intrusion. The statistics technique is discussed but will not be programmed at this current time. We will also attempt to show manually how this algorithm will detect the patterns using previous research as it correlates to this specific data using logs provided and some data mining algorithm."

Sample of Sources Used:

• Tarek Abbes, ET. Al, High Performance Intrusion Detection using Traffic Classification, 11/15/2004. Research Paper. Page 1.
• Wenke Lee and Salvatore J. Stolfo, Data Mining Approaches for Intrusion Detection, - Referenced 4/4/ 2007, http://www1.cs.columbia.edu/~sal/hpapers/USENIX/usenix.html#Fayyad_1996b
• Jian Pei, ET. Al, Data Mining for Intrusion Detection - Techniques, Applications and Systems, Powerpoint presentation referenced 4/15/2007. Pages 10, 64. http://www.cse.uconn.edu/icde04/tutorials/Pei.pdf
• Mamoun Awad, Data Mining &Intrusion Detection Systems - Powerpoint presentation referenced 4/15/2007 http://www.utdallas.edu/~bxt043000/Lecture20.ppt#18

More papers on Anomaly Intrusion Detection:

• Descriptive Essay # 105157 : "Intrusion Detection Protocol (IDP)"
• Comparison Essay # 144115 : "Intrusion Detection Systems vs. Intrusion Protection Systems"

APA Citation:

MLA Citation: