Assessing the uncertainty of communication patterns in distributed intrusion detection system

Authors:
Krzysztof Juszczyszyn;Grzegorz Kołaczek
Affiliations:
Institute of Information Science and Engineering, Wroclaw University of Technology, Wroclaw, Poland;Institute of Information Science and Engineering, Wroclaw University of Technology, Wroclaw, Poland
Venue:
KES'06 Proceedings of the 10th international conference on Knowledge-Based Intelligent Information and Engineering Systems - Volume Part II
Year:
2006

Citing 8
Cited 1

On power-law relationships of the Internet topology

Proceedings of the conference on Applications, technologies, architectures, and protocols for computer communication
A logic for uncertain probabilities

International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems
Observed structure of addresses in IP traffic

Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment
Agent-Based Model of Computer Network Security System: A Case Study

MMM-ACNS '01 Proceedings of the International Workshop on Information Assurance in Computer Networks: Methods, Models, and Architectures for Network Security
Leveraging Social Networks to Fight Spam

Computer
A first look at modern enterprise traffic

IMC '05 Proceedings of the 5th ACM SIGCOMM conference on Internet Measurement
Agent-Based approach for distributed intrusion detection system design

ICCS'06 Proceedings of the 6th international conference on Computational Science - Volume Part III
A mobile agent approach to intrusion detection in network systems

KES'05 Proceedings of the 9th international conference on Knowledge-Based Intelligent Information and Engineering Systems - Volume Part II

Multiagent Approach to Network Traffic Anomalies Uncertainty Level Assessment in Distributed Intrusion Detection System

KES-AMSTA '07 Proceedings of the 1st KES International Symposium on Agent and Multi-Agent Systems: Technologies and Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

A paper proposes a formal framework for communication patterns’ uncertainty assessment within a distributed multiagent IDS architecture. The role of the detection of communication anomalies in IDS is discussed then it is shown how sequences of detectable patterns like fan-in, fan-out values for given network node and clustering coefficients can be used to detect network anomalies caused by security incidents (worm attack, virus spreading). It is defined how to use the proposed techniques in distributed IDS and backtrack the incidents.