Title
Graphical Inference for Multiple Intrusion Detection
Abstract
In this paper, we consider vulnerabilities of networked systems and develop a multiple intrusion detection system (MIDS) which operates by running belief propagation on an appropriately constructed weighted bipartite graph. In this bipartite graph, one set of nodes represents the different types of intrusions that are possible, the other set of nodes represents the set of significant measures that are available, and the (weighted) connections represent the dependence of a certain measure on a particular type of intrusion. We assume that the effect of each active intrusion on a particular significant measure is superimposed on the normal operation of that measure; thus, we are able to obtain a complete representation of the overall bipartite graph model by superimposing the simpler graphs associated with each individual intrusion. The key ingredient of our MIDS is the development of a modified belief propagation max-product algorithm (MPA) that avoids the exponential complexity of the original MPA by limiting, during the iteration process, the number of active intrusions that are connected to a particular measure. Our simulation results indicate that the proposed MIDS performs well in detecting both single and multiple intrusions with a very low false alarm rate.
Year
DOI
Venue
2008
10.1109/TIFS.2008.928536
IEEE Transactions on Information Forensics and Security
Keywords
Field
DocType
bipartite graph,individual intrusion,particular significant measure,particular measure,significant measure,certain measure,active intrusion,multiple intrusion detection,graphical inference,multiple intrusion,overall bipartite graph model,multiple intrusion detection system,bayesian methods,probability distribution,normal operator,intrusion detection,graph theory,bayesian network,intrusion detection system,false alarm rate,belief propagation
Graph theory,Pattern recognition,Inference,Computer science,Bipartite graph,Theoretical computer science,Probability distribution,Bayesian network,Artificial intelligence,Constant false alarm rate,Intrusion detection system,Belief propagation
Journal
Volume
Issue
ISSN
3
3
1556-6013
Citations 
PageRank 
References 
1
0.44
18
Authors
2
Name
Order
Citations
PageRank
Tung Le1375.87
Christoforos N. Hadjicostis21425127.48