THE BAYESIAN RECEIVER OPERATING CHARACTERISTIC CURVE - AN EFFECTIVE APPROACH TO EVALUATE THE IDS PERFORMANCE
作者： Veselina Jecheva , Evgeniya Nikolova
DOI:
关键词:
摘要: The aim of intrusion detection systems is to protect the computer networks from attacks or unauthorized access their valuable resources. For that purpose they have perform real-time processing current system activity and make a decision whether pattern normal intrusive. present paper an extension our previous work, which presented anomaly-based IDS model, based on some decoding algorithms. It introduces evaluation proposed methodology, using Bayesian Receiver Operating Characteristics Curve.
参考文章(8)
John S. Baras, Alvaro A. Cárdenas, B-ROC curves for the assessment of classifiers over imbalanced data sets national conference on artificial intelligence. pp. 1581- 1584 ,(2006)
James P. Egan, Signal detection theory and ROC analysis Academic Press. ,(1975)
Wenke Lee, Salvatore J. Stolfo, A framework for constructing features and models for intrusion detection systems ACM Transactions on Information and System Security. ,vol. 3, pp. 227- 261 ,(2000) , 10.1145/382912.382914
A.A. Cardenas, J.S. Baras, K. Seamon, A framework for the evaluation of intrusion detection systems ieee symposium on security and privacy. pp. 63- 77 ,(2006) , 10.1109/SP.2006.2
M H Zweig, G Campbell, Receiver-operating characteristic (ROC) plots: a fundamental evaluation tool in clinical medicine. Clinical Chemistry. ,vol. 39, pp. 561- 577 ,(1993) , 10.1093/CLINCHEM/39.4.561
Veselina Gospodinova Jecheva, Evgeniya Petrova Nikolova, Anomaly Based Intrusion Detection Based on the Junction Tree Algorithm ,(2007)
J.E. Gaffney, J.W. Ulvila, Evaluation of intrusion detectors: a decision theory approach ieee symposium on security and privacy. pp. 50- 61 ,(2001) , 10.1109/SECPRI.2001.924287
Veselina Jecheva, Evgeniya Nikolova, Some Evaluations of the Effectiveness of Anomaly Based Intrusion Detection Systems Based on the Junction Tree Algorithm ,(2008)