NDLI: An attack-norm separation approach for detecting cyber attacks

Please wait, while we are loading the content...

Information Systems Frontiers : Volume 19

Information Systems Frontiers : Volume 18

Information Systems Frontiers : Volume 17

Information Systems Frontiers : Volume 16

Information Systems Frontiers : Volume 15

Information Systems Frontiers : Volume 14

Information Systems Frontiers : Volume 13

Information Systems Frontiers : Volume 12

Information Systems Frontiers : Volume 11

Information Systems Frontiers : Volume 10

Information Systems Frontiers : Volume 9

Information Systems Frontiers : Volume 8

Information Systems Frontiers : Volume 8, Issue 5, December 2006

Information Systems Frontiers : Volume 8, Issue 4, September 2006

Information Systems Frontiers : Volume 8, Issue 3, July 2006

A data mining approach to database compression

An attack-norm separation approach for detecting cyber attacks

Optimum design of electronic communities as economic entities

Splitting methods for decision tree induction: An exploration of the relative performance of two entropy-based families

Interplay of cost and adoption of tele-medicine in Sub-Saharan Africa: The case of tele-cardiology in Ethiopia

The rise and fall of the competitive local exchange carriers in the U.S.: An institutional perspective

Social influence process in the acceptance of a virtual community service

Information Systems Frontiers : Volume 8, Issue 2, February 2006

Information Systems Frontiers : Volume 8, Issue 1, February 2006

Information Systems Frontiers : Volume 7

Information Systems Frontiers : Volume 6

Information Systems Frontiers : Volume 5

Information Systems Frontiers : Volume 4

Information Systems Frontiers : Volume 3

Information Systems Frontiers : Volume 2

Information Systems Frontiers : Volume 1

An attack-norm separation approach for detecting cyber attacks

Content Provider	Springer Nature Link
Author	Ye, ng Farley, Toni Lakshminarasimhan, Deepak
Copyright Year	2006
Abstract	The two existing approaches to detecting cyber attacks on computers and networks, signature recognition and anomaly detection, have shortcomings related to the accuracy and efficiency of detection. This paper describes a new approach to cyber attack (intrusion) detection that aims to overcome these shortcomings through several innovations. We call our approach attack-norm separation. The attack-norm separation approach engages in the scientific discovery of data, features and characteristics for cyber signal (attack data) and noise (normal data). We use attack profiling and analytical discovery techniques to generalize the data, features and characteristics that exist in cyber attack and norm data. We also leverage well-established signal detection models in the physical space (e.g., radar signal detection), and verify them in the cyberspace. With this foundation of information, we build attack-norm separation models that incorporate both attack and norm characteristics. This enables us to take the least amount of relevant data necessary to achieve detection accuracy and efficiency. The attack-norm separation approach considers not only activity data, but also state and performance data along the cause-effect chains of cyber attacks on computers and networks. This enables us to achieve some detection adequacy lacking in existing intrusion detection systems.
Starting Page	163
Ending Page	177
Page Count	15
File Format	PDF
ISSN	13873326
Journal	Information Systems Frontiers
Volume Number	8
Issue Number	3
e-ISSN	15729419
Language	English
Publisher	Kluwer Academic Publishers
Publisher Date	2006-01-01
Publisher Place	Boston
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Cyber attacks Intrusion detection Computer and network security Signal processing Signal detection Management of Computing and Information Systems Systems Theory, Control Operations Research/Decision Theory Business Information Systems
Content Type	Text
Resource Type	Article
Subject	Theoretical Computer Science Computer Networks and Communications Information Systems Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Two-stage database intrusion detection by combining multiple evidence and belief update

Knowing who to watch: Identifying attackers whose actions are hidden within false alarms and background noise

B-CAT: a model for detecting botnet attacks using deep attack behavior analysis on network traffic flows

Constructing important features from massive network traffic for lightweight intrusion detection

Classifying RFID attacks and defenses

Extremely boosted neural network for more accurate multi-stage Cyber attack prediction in cloud computing environment

Dynamic competition in IT security: A differential games approach

Analysis of a multistage attack embedded in a video file

On Survivability of Mobile Cyber Physical Systems with Intrusion Detection

An attack-norm separation approach for detecting cyber attacks

Similar Documents

Two-stage database intrusion detection by combining multiple evidence and belief update

Knowing who to watch: Identifying attackers whose actions are hidden within false alarms and background noise

B-CAT: a model for detecting botnet attacks using deep attack behavior analysis on network traffic flows

Constructing important features from massive network traffic for lightweight intrusion detection

Classifying RFID attacks and defenses

Extremely boosted neural network for more accurate multi-stage Cyber attack prediction in cloud computing environment

Dynamic competition in IT security: A differential games approach

Analysis of a multistage attack embedded in a video file

On Survivability of Mobile Cyber Physical Systems with Intrusion Detection

An attack-norm separation approach for detecting cyber attacks