Analysis of Data Dependency Based Intrusion Detection System

Authors:
Yermek Nugmanov;Brajendra Panda;Yi Hu
Affiliations:
Computer Science and Computer Engineering Department, University of Arkansas, Fayetteville 72701;Computer Science and Computer Engineering Department, University of Arkansas, Fayetteville 72701;Computer Science Department, Northern Kentucky University, Highland Heights, 41099
Venue:
Proceedings of the 23rd Annual IFIP WG 11.3 Working Conference on Data and Applications Security XXIII
Year:
2009

Citing 9
Cited 0

Towards a taxonomy of intrusion-detection systems

Computer Networks: The International Journal of Computer and Telecommunications Networking - Special issue on computer network security
DEMIDS: a misuse detection system for database systems

Integrity and internal control information systems
The base-rate fallacy and the difficulty of intrusion detection

ACM Transactions on Information and System Security (TISSEC)
Introduction to Algorithms

Introduction to Algorithms
Toward cost-sensitive modeling for intrusion detection and response

Journal of Computer Security
Architectures for Intrusion Tolerant Database Systems

ACSAC '02 Proceedings of the 18th Annual Computer Security Applications Conference
Intrusion Detection in Real-Time Database Systems via Time Signatures

RTAS '00 Proceedings of the Sixth IEEE Real Time Technology and Applications Symposium (RTAS 2000)
A data mining approach for database intrusion detection

Proceedings of the 2004 ACM symposium on Applied computing
Intrusion Detection in RBAC-administered Databases

ACSAC '05 Proceedings of the 21st Annual Computer Security Applications Conference

Quantified Score

Hi-index	0.00

Visualization

Abstract

This research focuses on analyzing the cost effectiveness of a database intrusion detection system that uses dependencies among data items to detect malicious transactions. The model suggested in this paper considers three main factors: the quality of intrusion detection, the probability of intrusion, and the cost structure of an organization whose data is protected by the intrusion detection system. We developed a step by step approach that helps in determining the optimal configuration expressed by the response strategy and the threshold value. The experimental results show that our model is capable of finding the optimal configuration while taking the cost structure of an organization into consideration.