IDS Based on Bio-inspired Models
Identifieur interne : 001613 ( Main/Exploration ); précédent : 001612; suivant : 001614IDS Based on Bio-inspired Models
Auteurs : Paolo Gastaldo [Italie] ; Francesco Picasso [Italie] ; Rodolfo Zunino [Italie] ; Álvaro Herrero [Espagne] ; Emilio Corchado [Espagne] ; Manuel Sáiz [Espagne]Source :
- Lecture Notes in Computer Science [ 0302-9743 ] ; 2007.
Abstract
Abstract: Unsupervised projection approaches can support Intrusion Detection Systems for computer network security. The involved technologies assist a network manager in detecting anomalies and potential threats by an intuitive display of the progression of network traffic. Projection methods operate as smart compression tools and map raw, high-dimensional traffic data into 2-D or 3-D spaces for subsequent graphical display. The paper compares three projection methods, namely, Cooperative Maximum Likelihood Hebbian Learning, Auto-Associative Back-Propagation networks and Principal Component Analysis. Empirical tests on anomalous situations related to the Simple Network Management Protocol (SNMP) confirm the validity of the projection-based approach. One of these anomalous situations (the SNMP community search) is faced by these projection models for the first time. This work also highlights the importance of the time-information dependence in the identification of anomalous situations in the case of the applied methods.
Url:
DOI: 10.1007/978-3-540-74827-4_17
Affiliations:
Links toward previous steps (curation, corpus...)
- to stream Istex, to step Corpus: 001B60
- to stream Istex, to step Curation: 001B60
- to stream Istex, to step Checkpoint: 000499
- to stream Main, to step Merge: 001639
- to stream Main, to step Curation: 001613
Le document en format XML
<record><TEI wicri:istexFullTextTei="biblStruct:series"><teiHeader><fileDesc><titleStmt><title xml:lang="en">IDS Based on Bio-inspired Models</title><author><name sortKey="Gastaldo, Paolo" sort="Gastaldo, Paolo" uniqKey="Gastaldo P" first="Paolo" last="Gastaldo">Paolo Gastaldo</name></author><author><name sortKey="Picasso, Francesco" sort="Picasso, Francesco" uniqKey="Picasso F" first="Francesco" last="Picasso">Francesco Picasso</name></author><author><name sortKey="Zunino, Rodolfo" sort="Zunino, Rodolfo" uniqKey="Zunino R" first="Rodolfo" last="Zunino">Rodolfo Zunino</name></author><author><name sortKey="Herrero, Alvaro" sort="Herrero, Alvaro" uniqKey="Herrero A" first="Álvaro" last="Herrero">Álvaro Herrero</name></author><author><name sortKey="Corchado, Emilio" sort="Corchado, Emilio" uniqKey="Corchado E" first="Emilio" last="Corchado">Emilio Corchado</name></author><author><name sortKey="Saiz, Manuel" sort="Saiz, Manuel" uniqKey="Saiz M" first="Manuel" last="Sáiz">Manuel Sáiz</name></author></titleStmt><publicationStmt><idno type="wicri:source">ISTEX</idno><idno type="RBID">ISTEX:86E5714CB66CE186BFE514A0D0DCF41754C69FA2</idno><date when="2007" year="2007">2007</date><idno type="doi">10.1007/978-3-540-74827-4_17</idno><idno type="url">https://api.istex.fr/document/86E5714CB66CE186BFE514A0D0DCF41754C69FA2/fulltext/pdf</idno><idno type="wicri:Area/Istex/Corpus">001B60</idno><idno type="wicri:Area/Istex/Curation">001B60</idno><idno type="wicri:Area/Istex/Checkpoint">000499</idno><idno type="wicri:doubleKey">0302-9743:2007:Gastaldo P:ids:based:on</idno><idno type="wicri:Area/Main/Merge">001639</idno><idno type="wicri:Area/Main/Curation">001613</idno><idno type="wicri:Area/Main/Exploration">001613</idno></publicationStmt><sourceDesc><biblStruct><analytic><title level="a" type="main" xml:lang="en">IDS Based on Bio-inspired Models</title><author><name sortKey="Gastaldo, Paolo" sort="Gastaldo, Paolo" uniqKey="Gastaldo P" first="Paolo" last="Gastaldo">Paolo Gastaldo</name><affiliation wicri:level="1"><country xml:lang="fr">Italie</country><wicri:regionArea>Dept. of Biophysical and Electronic Engineering (DIBE), Genoa University, Via Opera Pia 11a, 16145 Genoa</wicri:regionArea><wicri:noRegion>16145 Genoa</wicri:noRegion></affiliation><affiliation wicri:level="1"><country wicri:rule="url">Italie</country></affiliation></author><author><name sortKey="Picasso, Francesco" sort="Picasso, Francesco" uniqKey="Picasso F" first="Francesco" last="Picasso">Francesco Picasso</name><affiliation wicri:level="1"><country xml:lang="fr">Italie</country><wicri:regionArea>Dept. of Biophysical and Electronic Engineering (DIBE), Genoa University, Via Opera Pia 11a, 16145 Genoa</wicri:regionArea><wicri:noRegion>16145 Genoa</wicri:noRegion></affiliation><affiliation wicri:level="1"><country wicri:rule="url">Italie</country></affiliation></author><author><name sortKey="Zunino, Rodolfo" sort="Zunino, Rodolfo" uniqKey="Zunino R" first="Rodolfo" last="Zunino">Rodolfo Zunino</name><affiliation wicri:level="1"><country xml:lang="fr">Italie</country><wicri:regionArea>Dept. of Biophysical and Electronic Engineering (DIBE), Genoa University, Via Opera Pia 11a, 16145 Genoa</wicri:regionArea><wicri:noRegion>16145 Genoa</wicri:noRegion></affiliation><affiliation wicri:level="1"><country wicri:rule="url">Italie</country></affiliation></author><author><name sortKey="Herrero, Alvaro" sort="Herrero, Alvaro" uniqKey="Herrero A" first="Álvaro" last="Herrero">Álvaro Herrero</name><affiliation wicri:level="2"><country xml:lang="fr">Espagne</country><wicri:regionArea>Department of Civil Engineering, University of Burgos, C/ Francisco de Vitoria s/n, 09006 Burgos</wicri:regionArea><placeName><region nuts="2" type="communauté">Castille-et-León</region></placeName></affiliation><affiliation wicri:level="1"><country wicri:rule="url">Espagne</country></affiliation></author><author><name sortKey="Corchado, Emilio" sort="Corchado, Emilio" uniqKey="Corchado E" first="Emilio" last="Corchado">Emilio Corchado</name><affiliation wicri:level="2"><country xml:lang="fr">Espagne</country><wicri:regionArea>Department of Civil Engineering, University of Burgos, C/ Francisco de Vitoria s/n, 09006 Burgos</wicri:regionArea><placeName><region nuts="2" type="communauté">Castille-et-León</region></placeName></affiliation><affiliation wicri:level="1"><country wicri:rule="url">Espagne</country></affiliation></author><author><name sortKey="Saiz, Manuel" sort="Saiz, Manuel" uniqKey="Saiz M" first="Manuel" last="Sáiz">Manuel Sáiz</name><affiliation wicri:level="2"><country xml:lang="fr">Espagne</country><wicri:regionArea>Department of Civil Engineering, University of Burgos, C/ Francisco de Vitoria s/n, 09006 Burgos</wicri:regionArea><placeName><region nuts="2" type="communauté">Castille-et-León</region></placeName></affiliation><affiliation wicri:level="1"><country wicri:rule="url">Espagne</country></affiliation></author></analytic><monogr></monogr><series><title level="s">Lecture Notes in Computer Science</title><imprint><date>2007</date></imprint><idno type="ISSN">0302-9743</idno><idno type="eISSN">1611-3349</idno><idno type="ISSN">0302-9743</idno></series><idno type="istex">86E5714CB66CE186BFE514A0D0DCF41754C69FA2</idno><idno type="DOI">10.1007/978-3-540-74827-4_17</idno><idno type="ChapterID">Chap17</idno><idno type="ChapterID">17</idno></biblStruct></sourceDesc><seriesStmt><idno type="ISSN">0302-9743</idno></seriesStmt></fileDesc><profileDesc><textClass></textClass><langUsage><language ident="en">en</language></langUsage></profileDesc></teiHeader><front><div type="abstract" xml:lang="en">Abstract: Unsupervised projection approaches can support Intrusion Detection Systems for computer network security. The involved technologies assist a network manager in detecting anomalies and potential threats by an intuitive display of the progression of network traffic. Projection methods operate as smart compression tools and map raw, high-dimensional traffic data into 2-D or 3-D spaces for subsequent graphical display. The paper compares three projection methods, namely, Cooperative Maximum Likelihood Hebbian Learning, Auto-Associative Back-Propagation networks and Principal Component Analysis. Empirical tests on anomalous situations related to the Simple Network Management Protocol (SNMP) confirm the validity of the projection-based approach. One of these anomalous situations (the SNMP community search) is faced by these projection models for the first time. This work also highlights the importance of the time-information dependence in the identification of anomalous situations in the case of the applied methods.</div></front></TEI><affiliations><list><country><li>Espagne</li><li>Italie</li></country><region><li>Castille-et-León</li></region></list><tree><country name="Italie"><noRegion><name sortKey="Gastaldo, Paolo" sort="Gastaldo, Paolo" uniqKey="Gastaldo P" first="Paolo" last="Gastaldo">Paolo Gastaldo</name></noRegion><name sortKey="Gastaldo, Paolo" sort="Gastaldo, Paolo" uniqKey="Gastaldo P" first="Paolo" last="Gastaldo">Paolo Gastaldo</name><name sortKey="Picasso, Francesco" sort="Picasso, Francesco" uniqKey="Picasso F" first="Francesco" last="Picasso">Francesco Picasso</name><name sortKey="Picasso, Francesco" sort="Picasso, Francesco" uniqKey="Picasso F" first="Francesco" last="Picasso">Francesco Picasso</name><name sortKey="Zunino, Rodolfo" sort="Zunino, Rodolfo" uniqKey="Zunino R" first="Rodolfo" last="Zunino">Rodolfo Zunino</name><name sortKey="Zunino, Rodolfo" sort="Zunino, Rodolfo" uniqKey="Zunino R" first="Rodolfo" last="Zunino">Rodolfo Zunino</name></country><country name="Espagne"><region name="Castille-et-León"><name sortKey="Herrero, Alvaro" sort="Herrero, Alvaro" uniqKey="Herrero A" first="Álvaro" last="Herrero">Álvaro Herrero</name></region><name sortKey="Corchado, Emilio" sort="Corchado, Emilio" uniqKey="Corchado E" first="Emilio" last="Corchado">Emilio Corchado</name><name sortKey="Corchado, Emilio" sort="Corchado, Emilio" uniqKey="Corchado E" first="Emilio" last="Corchado">Emilio Corchado</name><name sortKey="Herrero, Alvaro" sort="Herrero, Alvaro" uniqKey="Herrero A" first="Álvaro" last="Herrero">Álvaro Herrero</name><name sortKey="Saiz, Manuel" sort="Saiz, Manuel" uniqKey="Saiz M" first="Manuel" last="Sáiz">Manuel Sáiz</name><name sortKey="Saiz, Manuel" sort="Saiz, Manuel" uniqKey="Saiz M" first="Manuel" last="Sáiz">Manuel Sáiz</name></country></tree></affiliations></record>Pour manipuler ce document sous Unix (Dilib)
EXPLOR_STEP=$WICRI_ROOT/Wicri/Musique/explor/OperaV1/Data/Main/Exploration
HfdSelect -h $EXPLOR_STEP/biblio.hfd -nk 001613 | SxmlIndent | more
Ou
HfdSelect -h $EXPLOR_AREA/Data/Main/Exploration/biblio.hfd -nk 001613 | SxmlIndent | more
Pour mettre un lien sur cette page dans le réseau Wicri
{{Explor lien
|wiki= Wicri/Musique
|area= OperaV1
|flux= Main
|étape= Exploration
|type= RBID
|clé= ISTEX:86E5714CB66CE186BFE514A0D0DCF41754C69FA2
|texte= IDS Based on Bio-inspired Models
}}
| This area was generated with Dilib version V0.6.21. |  |