Name
Abstract | ||
|---|---|---|
The fuzzy association rule has been proven to be effective to present users' network behavior offline from a huge amount of collected packets. However, not only effectiveness, efficiency is important as well for Network Intrusion Detection Systems (NIDSs). None of those proposed NIDSs subject to fuzzy association rule can meet the real-time requirement because they all applied static mining approach. In the paper, we propose a real-time NIDS by incremental mining for fuzzy association rules. By consistently comparing the two rule sets, one mined from online packets and the other mined from training attack-free packets, our system can make a decision per time unit, 2 seconds in the paper. Experiments have been done to demonstrate its excellent effectiveness and efficiency of the system. |
Year | DOI | Venue |
|---|---|---|
2008 | 10.1109/ISI.2008.4565050 | ISI 2008: 2008 IEEE INTERNATIONAL CONFERENCE ON INTELLIGENCE AND SECURITY INFORMATICS |
Keywords | DocType | Citations |
network security, real-time NIDS, anomaly-based NIDS, association rules, fuzzy association rules, online mining, incremental mining | Conference | 1 |
PageRank | References | Authors |
0.36 | 6 | 4 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Ming-Yang Su | 1 | 362 | 22.26 |
| Kai-Chi Chang | 2 | 16 | 2.94 |
| Hua-Fu Wei | 3 | 8 | 1.27 |
| Chun-Yuen Lin | 4 | 41 | 3.71 |