Autonomic Intrusion Detection System - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2009

Autonomic Intrusion Detection System

Résumé

Abstract. We propose a novel framework of autonomic intrusion detection that fulfills online and adaptive intrusion detection in unlabeled audit data streams. The framework owns ability of self-managing: self-labeling, self-updating and self-adapting. Affinity Propagation (AP) uses the framework to learn a subject's behavior through dynamical clustering of the streaming data. The testing results with a large real HTTP log stream demonstrate the effectiveness and efficiency of the method.
Fichier non déposé

Dates et versions

inria-00461382 , version 1 (04-03-2010)

Identifiants

  • HAL Id : inria-00461382 , version 1

Citer

Wei Wang, Thomas Guyet, Svein Knapskog. Autonomic Intrusion Detection System. Recent Advances in Intrusion Detection, Sep 2009, Saint Malo, France. ⟨inria-00461382⟩
94 Consultations
0 Téléchargements

Partager

Gmail Facebook X LinkedIn More