A real-time Network Intrusion Detection System based on incremental mining approach

被引:1
|
作者
Su, Ming-Yang [1 ]
Chang, Kai-Chi [2 ]
Wei, Hua-Fu [1 ]
Lin, Chun-Yuen [1 ]
机构
[1] Ming Chuan Univ, Dept Comp Sci & Informat Engn, Tao Yuan, Taiwan
[2] Ming Chuan Univ, Taipei, Taiwan
关键词
network security; real-time NIDS; anomaly-based NIDS; association rules; fuzzy association rules; online mining; incremental mining;
D O I
10.1109/ISI.2008.4565050
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
The fuzzy association rule has been proven to be effective to present users' network behavior offline from a huge amount of collected packets. However, not only effectiveness, efficiency is important as well for Network Intrusion Detection Systems (NIDSs). None of those proposed NIDSs subject to fuzzy association rule can meet the real-time requirement because they all applied static mining approach. In the paper, we propose a real-time NIDS by incremental mining for fuzzy association rules. By consistently comparing the two rule sets, one mined from online packets and the other mined from training attack-free packets, our system can make a decision per time unit, 2 seconds in the paper. Experiments have been done to demonstrate its excellent effectiveness and efficiency of the system.
引用
收藏
页码:179 / +
页数:2
相关论文
共 50 条
  • [1] A real-time network intrusion detection system for large-scale attacks based on an incremental mining approach
    Su, Ming-Yang
    Yu, Gwo-Jong
    Lin, Chun-Yuen
    [J]. COMPUTERS & SECURITY, 2009, 28 (05) : 301 - 309
  • [2] Using Incremental Mining to Generate Fuzzy Rules for Real-Time Network Intrusion Detection Systems
    Su, Ming-Yang
    Yeh, Sheng-Cheng
    Chang, Kai-Chi
    Wei, Hua-Fu
    [J]. 2008 22ND INTERNATIONAL WORKSHOPS ON ADVANCED INFORMATION NETWORKING AND APPLICATIONS, VOLS 1-3, 2008, : 50 - 55
  • [3] Building Real-Time Network Intrusion Detection System Based on Parallel Time-Series Mining Techniques
    赵峰
    李庆华
    [J]. Railway Engineering Science, 2005, (01) : 11 - 17
  • [4] Data Mining for Network Intrusion Detection System in Real Time
    Peng, Tao
    Zuo, Wanli
    [J]. INTERNATIONAL JOURNAL OF COMPUTER SCIENCE AND NETWORK SECURITY, 2006, 6 (2B): : 173 - 177
  • [5] Deep Neural Network Based Real-Time Intrusion Detection System
    Sharuka Promodya Thirimanne
    Lasitha Jayawardana
    Lasith Yasakethu
    Pushpika Liyanaarachchi
    Chaminda Hewage
    [J]. SN Computer Science, 2022, 3 (2)
  • [6] Real-Time Network Intrusion Detection System Based on Deep Learning
    Dong, Yuansheng
    Wang, Rong
    He, Juan
    [J]. PROCEEDINGS OF 2019 IEEE 10TH INTERNATIONAL CONFERENCE ON SOFTWARE ENGINEERING AND SERVICE SCIENCE (ICSESS 2019), 2019, : 1 - 4
  • [7] Network intrusion intelligent real-time detection system
    Zhao, Haibo
    Li, Jianhua
    Yang, Yuhang
    [J]. Shanghai Jiaotong Daxue Xuebao/Journal of Shanghai Jiaotong University, 1999, 33 (01): : 76 - 79
  • [8] A hybrid approach for real-time network intrusion detection systems
    Lee, Sang Min
    Kim, Dong Seong
    Park, Jong Sou
    [J]. CIS: 2007 INTERNATIONAL CONFERENCE ON COMPUTATIONAL INTELLIGENCE AND SECURITY, PROCEEDINGS, 2007, : 712 - 715
  • [9] A Continuous Learning Approach for Real-Time Network Intrusion Detection
    Martina, Marcello Rinaldo
    Foresti, Gian Luca
    [J]. INTERNATIONAL JOURNAL OF NEURAL SYSTEMS, 2021, 31 (12)
  • [10] Real-Time Network Intrusion Prevention System Using Incremental Feature Generation
    Uhm, Yeongje
    Pak, Wooguil
    [J]. CMC-COMPUTERS MATERIALS & CONTINUA, 2022, 70 (01): : 1631 - 1648