NDLI: Operator-Centric and Adaptive Intrusion Detection

Content Provider	IEEE Xplore Digital Library
Author	Larson, U.E. Lindskog, S. Nilsson, D.K. Jonsson, E.
Copyright Year	2008
Description	Author affiliation: Dept. of Comput. Sci. & Eng., Chalmers Univ. of Technol., Goteborg (Larson, U.E.)
Abstract	An intrusion detection system should support the operator of the system. Thus, in addition to producing alerts, it should allow for easy insertion of new detection algorithms. It should also support dynamic selection and de-selection of detection algorithms, and it should adjust its resource consumption to the current need. Such a system would allow the operator to easily extend the system when new detection algorithms become available. It would also allow the operator to maintain a low-cost monitoring baseline and perform more extensive monitoring when it is required. In this paper we propose an architecture for intrusion detection which aims at providing the operator with this support. The architecture uses a modular design to promote a high degree of flexibility. This supports creation of an environment in which state-of-the-art intrusion detection algorithms easily can be inserted. The modular design also allows for detection algorithms to be enabled and disabled when required. Additionally, the architecture uses a sensor reconfiguration mechanism to affect the amount of data collected. When a detection algorithm is enabled or disabled, the sensor providing the input data to the algorithm is correspondingly reconfigured. This implies a minimum of excess collected data. To illustrate the feasibility of the architecture, we provide a proof - of-concept supporting monitoring of users for insider detection and webserver monitoring for intrusion attempts.
Starting Page	161
Ending Page	166
File Size	163869
Page Count	6
File Format	PDF
ISBN	9780769533247
DOI	10.1109/IAS.2008.42
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2008-09-08
Publisher Place	Italy
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Monitoring Data mining Intrusion detection Detectors Detection algorithms Computer architecture Organizations adaption sensor reconfiguration intrusion detection system architecture operator-centric
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Data mining based network intrusion detection system: A database centric approach

Intrusion detection system using stream data mining and drift detection method

A novel adaptive intrusion detection system based on data mining

Efficient Intrusion Detection System Using Stream Data Mining Classification Technique

Multi-Violation Detectors: An algebraic tool for Alert Correlation and Intrusion Detection

Data stream mining architecture for network intrusion detection

Intrusion Detection Based on Data Mining

An Adaptive Clustering Algorithm for Intrusion Detection

Mathematical analysis of sensor fusion for intrusion detection systems

Operator-Centric and Adaptive Intrusion Detection

Similar Documents

Data mining based network intrusion detection system: A database centric approach

Intrusion detection system using stream data mining and drift detection method

A novel adaptive intrusion detection system based on data mining

Efficient Intrusion Detection System Using Stream Data Mining Classification Technique

Multi-Violation Detectors: An algebraic tool for Alert Correlation and Intrusion Detection

Data stream mining architecture for network intrusion detection

Intrusion Detection Based on Data Mining

An Adaptive Clustering Algorithm for Intrusion Detection

Mathematical analysis of sensor fusion for intrusion detection systems

Operator-Centric and Adaptive Intrusion Detection