Automatic firewall rules generator for anomaly detection systems with Apriori algorithm

Network intrusion detection systems have become a crucial issue for computer systems security infrastructures. Different methods and algorithms are developed and proposed in recent years to improve intrusion detection systems. The most important issue in current systems is that they are poor at dete...

Celý popis

Uloženo v:
Podrobná bibliografie
Vydáno v:2010 3rd International Conference on Advanced Computer Theory and Engineering(ICACTE) Ročník 6; s. V6-57 - V6-60
Hlavní autoři: Saboori, Ehsan, Parsazad, Shafigh, Sanatkhani, Yasaman
Médium: Konferenční příspěvek
Jazyk:angličtina
Vydáno: IEEE 01.08.2010
Témata:
Anomaly detection
Apriori algorithm
Association rule learning
Association rules
Classification algorithms
Data mining
Firewalls (computing)
Intrusion
Intrusion detection
Intrusion detection systems
Itemsets
Real-time systems
Software
Training
ISBN:1424465397, 9781424465392
ISSN:2154-7491
On-line přístup:Získat plný text
Tagy: Přidat tag
Žádné tagy, Buďte první, kdo vytvoří štítek k tomuto záznamu!
Popis
Shrnutí:Network intrusion detection systems have become a crucial issue for computer systems security infrastructures. Different methods and algorithms are developed and proposed in recent years to improve intrusion detection systems. The most important issue in current systems is that they are poor at detecting novel anomaly attacks. These kinds of attacks refer to any action that significantly deviates from the normal behaviour which is considered intrusion. This paper proposed a model to improve this problem based on data mining techniques. Apriori algorithm is used to predict novel attacks and generate real-time rules for firewall. Apriori algorithm extracts interesting correlation relationships among large set of data items. This paper illustrates how to use Apriori algorithm in intrusion detection systems to cerate a automatic firewall rules generator to detect novel anomaly attack. Apriori is the best-known algorithm to mine association rules. This is an innovative way to find association rules on large scale.
ISBN:1424465397
9781424465392
ISSN:2154-7491
DOI:10.1109/ICACTE.2010.5579365