NDLI: Dynamic model selection with its applications to computer security

Content Provider	IEEE Xplore Digital Library
Author	Maruyama, Y. Yamanishi, K.
Copyright Year	2004
Description	Author affiliation: NEC Corp., Kanagawa, Japan (Maruyama, Y.; Yamanishi, K.)
Abstract	In recent years there has been increased interest in detecting anomalies in network traffic data/audit logs for computer security. With the appearance of a masquerader, for example, any new anomalous behavior pattern may be observed in command line data, and it is an important issue to detect the emergence of such a pattern as early as possible. This paper addresses this issue of anomaly detection by dynamically selecting statistical models from data. Our goal is here not to select a single model over the data as in conventional statistical model selection, but to select a time series of optimal models efficiently, assuming that the true model may change over time. We call this approach dynamic model selection. We first propose a coding-theoretic criterion for dynamic model selection. Next, we propose two dynamic model selection algorithms attaining the minimum of the criteria and analyze their performance. Finally we demonstrate the validity of our algorithms through real application to masquerade detection using UNIX command sequences.
Starting Page	82
Ending Page	87
File Size	424641
Page Count	6
File Format	PDF
ISBN	0780387201
DOI	10.1109/ITW.2004.1405279
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2004-10-24
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Application software Computer security Intrusion detection National electric code Telecommunication traffic Change detection algorithms Electronic mail Traffic control Performance analysis Algorithm design and analysis
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

MRSI: A Fast Pattern Matching Algorithm for Anti-virus Applications

Dynamic Model Selection With its Applications to Novelty Detection

Performance analysis of content matching intrusion detection systems

IntruDetector: a software platform for testing network intrusion detection algorithms

Improvement on rules matching algorithm of snort based on dynamic adjustment

Abnormal traffic detection and its implementation

Modified genetic algorithm based feature subset selection in intrusion detection system

Handling nominal features in anomaly intrusion detection problems

Dynamic modeling of Internet traffic for intrusion detection

Dynamic model selection with its applications to computer security

Similar Documents

MRSI: A Fast Pattern Matching Algorithm for Anti-virus Applications

Dynamic Model Selection With its Applications to Novelty Detection

Performance analysis of content matching intrusion detection systems

IntruDetector: a software platform for testing network intrusion detection algorithms

Improvement on rules matching algorithm of snort based on dynamic adjustment

Abnormal traffic detection and its implementation

Modified genetic algorithm based feature subset selection in intrusion detection system

Handling nominal features in anomaly intrusion detection problems

Dynamic modeling of Internet traffic for intrusion detection

Dynamic model selection with its applications to computer security