Forecast techniques for predicting increase or decrease of attacks using Bayesian inference

作者: C. Ishida , Y. Arakawa , I. Sasase , K. Takemori

DOI: 10.1109/PACRIM.2005.1517323

关键词:

摘要: The analysis techniques of intrusion detection system (IDS) events are actively researched, since it is important to understand attack trends and devise countermeasures against incidents. To aim at a quick response in security operation, necessary forecast fluctuation attacks. However, there no approach for predicting the attacks, attacks seems be random. In this paper, we propose increase or decrease by using Bayesian inference calculating conditional probability based on past-observed event counts. We consider two algorithms focusing an cycle range implement forecasting evaluate with real IDS events. As result, our proposed technique can counts, effective various types

参考文章(4)
Hervé Debar, Andreas Wespi, Aggregation and Correlation of Intrusion-Detection Alerts recent advances in intrusion detection. pp. 85- 103 ,(2001) , 10.1007/3-540-45474-8_6
F. Cuppens, Managing alerts in a multi-intrusion detection environment annual computer security applications conference. pp. 22- 31 ,(2001) , 10.1109/ACSAC.2001.991518
D.J. Burroughs, L.F. Wilson, G.V. Cybenko, Analysis of distributed intrusion detection systems using Bayesian methods international performance computing and communications conference. pp. 329- 334 ,(2002) , 10.1109/IPCCC.2002.995166
C. Manikopoulos, S. Papavassiliou, Network intrusion and fault detection: a statistical anomaly approach IEEE Communications Magazine. ,vol. 40, pp. 76- 82 ,(2002) , 10.1109/MCOM.2002.1039860