Ontology-based Distributed Intrusion Detection System

被引：23

作者：

Abdoli, F. ^{[1
]}

Kahani, M. ^{[1
]}

机构：

[1] Ferdowsi Univ Mashhad, Commun & Comp Res Ctr, Mashhad, Iran

来源：

2009 14TH INTERNATIONAL COMPUTER CONFERENCE | 2009年

关键词：

Ontology; Intrusion Detection System; Denial of Service attack;

D O I：

10.1109/CSICC.2009.5349372

中图分类号：

TP301 [理论、方法];

学科分类号：

081202 ;

摘要：

In this paper we discussed about utilizing methods and techniques of semantic web in the Intrusion Detection Systems. To extract semantic relations between computer attacks and intrusions in a Distributed Intrusion Detection System, we use ontology. Prot g software is our selected software for building ontology. In addition, we utilized Jena framework to make interaction between MasterAgent and attacks ontology. Our Distributed Intrusion Detection System is a network which contains some IDSagents and a special MasterAgent. MasterAgent contains our proposed attacks ontology. Every time a IDSagent detects an attack or new suspected condition, it sends detection's report for MasterAgent. Therefore, it can extract the semantic relationship among computer attacks and suspected situations in the network with proposed ontology. Finally, the experience shows that the pruposed system reduced the rate of false positive and false negative.

引用

页码：65 / +

页数：3

共 25 条

[11]

Levin I., 2000, SIGKDD Explorations, V1, P67, DOI [10.1145/846183.846201, DOI 10.1145/846183.846201]

[12]

MANDUJANO S, 2005, ONTOLOGY SUPPORT INT

[13]

MANDUJANO S, 2005, 3 ACS IEEE INT C COM, V1, P120

[14]

MCGUINNESS DL, 2003, ONTOLOGY COME OG AGE

[15]

MOHAJERANI M, IEEE 2003

[16]

NADJARAN A, 2006, ICOCI2006 KUAL LUMP

[17]

Pfahringer, 2000, SIGKDD Explor, V1, P65, DOI DOI 10.1145/846183.846200

[18]

Raskin V., 2001, Proceedings of the 2001 workshop on New security paradigms, NSPW '01, (New York, NY, USA), P53, DOI DOI 10.1145/508171.508180

[19]

SIMON HR, 2005, COMPUTERS SECURITY, V24

[20]

SONG D, 2005, IEEE T EVOLUTIONARY

← 1 2 3 →