CONDITIONAL RANDOM FIELDS BASED REAL-TIME INTRUSION DETECTION FRAMEWORK

被引:0
作者
Gu, Jiaojiao [1 ]
Jiang, Wenzhi [1 ]
Hu, Wenxuan [1 ]
Zhang, Xiaoyu [1 ]
机构
[1] Naval Aeronaut & Astronaut Univ, Yantai, Peoples R China
来源
3RD INTERNATIONAL CONFERENCE ON INFORMATION TECHNOLOGY AND COMPUTER SCIENCE (ITCS 2011), PROCEEDINGS | 2011年
关键词
intrusion detection; anomaly; CRFs; Machine Learning; layered framework;
D O I
暂无
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Intrusion detection systems are now an essential component in the all kinds of network even including wireless ad hoc network. With the rapid advancement in the network technologies the focus of intrusion detection has shifted from simple signature matching approaches to detecting attacks based on analyzing contextual information that employed in anomaly and hybrid intrusion detection approaches. This paper proposed a layered anomaly intrusion detection framework using Conditional Random Fields to detect a wide variety of attacks. With this framework attacks can be identified and intrusion response can be initiated in real time. Experiments show that the CRF model can detect attacks effectively.
引用
收藏
页码:186 / 189
页数:4
相关论文
共 15 条
  • [1] Abraham Tamas, 2007, IDDM INTRUSION DETEC
  • [2] [Anonymous], 2006, INTRO STAT RELATIONA
  • [3] [Anonymous], 2004, P 2004 ACM S APPL CO, DOI DOI 10.1145/967900.967989
  • [4] Protecting against cyber threats in networked information systems
    Ertoz, L
    Lazarevic, A
    Eilertson, E
    Tan, PN
    Dokas, P
    Kumar, V
    Srivastava, J
    [J]. BATTLESPACE DIGITIZATION AND NETWORK-CENTRIC SYSTEMS III, 2003, 5101 : 51 - 56
  • [5] Gupta Kapil Kumar, 2010, HDB COMMUNICATION NE, P645
  • [6] Hu Guangpeng, 2008, J JIANGSU U SCI TECH
  • [7] Kim DS, 2003, LECT NOTES COMPUT SC, V2662, P747
  • [8] Lafferty J, 2001, CONDITIONAL RANDOM F
  • [9] An overview of anomaly detection techniques: Existing solutions and latest technological trends
    Patcha, Animesh
    Park, Jung-Min
    [J]. COMPUTER NETWORKS, 2007, 51 (12) : 3448 - 3470
  • [10] SANS Institute, 2008, INTR DET FAQ