Host-Based Multivariate Statistical Computer Operating Process Anomaly Intrusion Detection System - Tapa blanda

Shilland, Glen R.

 
9781288417391: Host-Based Multivariate Statistical Computer Operating Process Anomaly Intrusion Detection System
Tapa blanda
ISBN 10: 128841739X ISBN 13: 9781288417391
Editorial: BiblioScholar, 2012

Sinopsis

Most intrusion detection systems rely on signature matching of known malware or anomaly discrimination by data mining historical network traffic. This renders defended systems vulnerable to new or polymorphic code and deceptive attacks that do not trigger anomaly alarms. A lightweight, self-aware intrusion detection system (IDS) is essential for the security of government and commercial networks, especially mobile, ad-hoc networks (MANETs) with relatively limited processing power. This research proposes a host-based, anomaly discrimination IDS using operating system process parameters to measure the "health" of individual systems. Principal Component Analysis (PCA) is employed for feature set selection and dimensionality reduction, while Mahalanobis Distance (MD) and is used to classify legitimate and illegitimate activity. This combination of statistical methods provides an efficient computer operating process anomaly intrusion detection system (PAIDS) that maximizes detection rate and minimizes false positive rate, while updating its sense of "self" in near-real-time.

"Sinopsis" puede pertenecer a otra edición de este libro.

Reseña del editor

Most intrusion detection systems rely on signature matching of known malware or anomaly discrimination by data mining historical network traffic. This renders defended systems vulnerable to new or polymorphic code and deceptive attacks that do not trigger anomaly alarms. A lightweight, self-aware intrusion detection system (IDS) is essential for the security of government and commercial networks, especially mobile, ad-hoc networks (MANETs) with relatively limited processing power. This research proposes a host-based, anomaly discrimination IDS using operating system process parameters to measure the "health" of individual systems. Principal Component Analysis (PCA) is employed for feature set selection and dimensionality reduction, while Mahalanobis Distance (MD) and is used to classify legitimate and illegitimate activity. This combination of statistical methods provides an efficient computer operating process anomaly intrusion detection system (PAIDS) that maximizes detection rate and minimizes false positive rate, while updating its sense of "self" in near-real-time.

"Sobre este título" puede pertenecer a otra edición de este libro.

Editorial
BiblioScholar
Año de publicación
2012
Idioma
Inglés
ISBN 10 
128841739X
ISBN 13 
9781288417391
Encuadernación
Tapa blanda
Número de páginas
146
Contacto del fabricante
no disponible
Persona responsable
no disponible