Welcome to Scribd, the world's digital library. Read, publish, and share books and documents. See more
Download
Standard view
Full view
of .
Save to My Library
Look up keyword
Like this
5Activity
0 of .
Results for:
No results containing your search query
P. 1
Online Intrusion Alert Aggregation With Generative Data Stream Modeling

Online Intrusion Alert Aggregation With Generative Data Stream Modeling

Ratings: (0)|Views: 3,291 |Likes:
Published by jp16586
Online Intrusion Alert Aggregation With Generative Data Stream Modeling

2011 IEEE projects, 2011 IEEE java projects, 2011 IEEE Dotnet projects, 2011 IEEE .net projects,IEEE Projects, IEEE Projects 2011,IEEE Academic Projects, IEEE 2011 Projects, IEEE, IEEE Projects Pondicherry,IEEE Software Projects, Latest IEEE Projects,IEEE Student Projects, IEEE Final year Student Projects,Final Year Projects, final year IEEE 2011 projects, final year 2011 projects,ENGINEERING PROJECTS, MCA projects, BE projects, Embedded Projects, JAVA projects, J2EE projects, .NET projects, Students projects,BE projects, B.Tech. projects, ME projects, M.Tech. projects, M.Phil Projects,jp infotech
Online Intrusion Alert Aggregation With Generative Data Stream Modeling

2011 IEEE projects, 2011 IEEE java projects, 2011 IEEE Dotnet projects, 2011 IEEE .net projects,IEEE Projects, IEEE Projects 2011,IEEE Academic Projects, IEEE 2011 Projects, IEEE, IEEE Projects Pondicherry,IEEE Software Projects, Latest IEEE Projects,IEEE Student Projects, IEEE Final year Student Projects,Final Year Projects, final year IEEE 2011 projects, final year 2011 projects,ENGINEERING PROJECTS, MCA projects, BE projects, Embedded Projects, JAVA projects, J2EE projects, .NET projects, Students projects,BE projects, B.Tech. projects, ME projects, M.Tech. projects, M.Phil Projects,jp infotech

More info:

Published by: jp16586 on Oct 23, 2011
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as DOC, PDF, TXT or read online from Scribd
See more
See less

07/20/2012

pdf

text

original

 
 ONLINE INTRUSION ALERT AGGREGATION WITHGENERATIVE DATA STREAM MODELINGABSTRACT:
Alert aggregation is an important subtask of intrusion detection. The goal is to identifyand to cluster different alerts—produced by low-level intrusion detection systems,firewalls, etc.—belonging to a specific attack instance which has been initiated by anattacker at a certain point in time. Thus, meta-alerts can be generated for the clusters thatcontain all the relevant information whereas the amount of data (i.e., alerts) can bereduced substantially. Meta-alerts may then be the basis for reporting to security expertsor for communication within a distributed intrusion detection system. We propose a noveltechnique for online alert aggregation which is based on a dynamic, probabilistic modelof the current attack situation. Basically, it can be regarded as a data stream version of amaximum likelihood approach for the estimation of the model parameters. With three benchmark data sets, we demonstrate that it is possible to achieve reduction rates of up to99.96 percent while the number of missing meta-alerts is extremely low. In addition,meta-alerts are generated with a delay of typically only a few seconds after observing thefirst alert belonging to a new attack instance.
OUR CONTRIBUTION:
The Authors proposed methods on many Intrusion Alerts. As our contribution, we makethe system more efficient in identify the intrusion alerts and also we extend this work bysending the Alerts as Message to the Network Administrator who governs the Network or Intrusion Detection System.
 
EXISTING SYSTEM
Most existing IDS are optimized to detect attacks with high accuracy. However,they still have various disadvantages that have been outlined in a number of  publications and a lot of work has been done to analyze IDS in order to directfuture research.
Besides others, one drawback is the large amount of alerts produced.
Alerts can be given only in System logs.
Existing IDS does not have general framework which cannot be customized byadding domain specific knowledge as per the specific requirements of the users or network administrators.
PROPOSED SYSTEM
Online Intrusion Alert Aggregation with Generative Data Stream Modeling is agenerative modeling approach using probabilistic methods. Assuming that attack instances can be regarded as random processes “producing” alerts, we aim atmodeling these processes using approximative maximum likelihood parameter estimation techniques. Thus, the beginning as well as the completion of attack instances can be detected.
 
It is a data stream approach, i.e., each observed alert is processed only a fewtimes. Thus, it can be applied online and under harsh timing constraints.
In the proposed scheme of Online Intrusion Alert Aggregation with GenerativeData Stream Modeling, we extend our idea of sending Intrusion alerts to themobile. This makes the process easier and comfortable.
Online Intrusion Alert Aggregation with Generative Data Stream Modeling doesnot degrade system performance as individual layers are independent and aretrained with only a small number of features, thereby, resulting in an efficientsystem.
Online Intrusion Alert Aggregation with Generative Data Stream Modeling iseasily customizable and the number of layers can be adjusted depending upon therequirements of the target network.
 
Our framework is not restrictive in using asingle method to detect attacks. Different methods can be seamlessly integrated inour framework to build effective intrusion detectors.
Our framework has the advantage that the type of attack can be inferred directlyfrom the layer at which it is detected. As a result, specific intrusion responsemechanisms can be activated for different attacks.

You're Reading a Free Preview

Download
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->