Fusing intrusion data for detection and containment

Mallikarjun Shankar; Nageswara Rao; Stephen Batsell

Fusing intrusion data for detection and containment

Mallikarjun Shankar, Nageswara Rao, Stephen Batsell

Research output: Contribution to conference › Paper › peer-review

6 Scopus citations

Abstract

Fusing information from diverse detectors remains a challenge in the field of intrusion detection. We apply data fusion techniques to fuse alerts generated by different detectors that signal the potential presence of an intrusion. Data fusion has been shown to result in a decrease in false positives while achieving an improved level of detection. By combining detections from fusers on distributed hosts, a system can also detect and track the spread of an intrusion. We proceed to analyze the response time requirements of such a distributed containment system by including an explicit containment parameter in the spreading formulation.

Original language	English
Pages	741-746
Number of pages	6
State	Published - 2003
Event	MILCOM 2003 - 2003 IEEE Military Communications Conference - Monterey, CA, United States Duration: Oct 13 2003 → Oct 16 2003

Conference

Conference	MILCOM 2003 - 2003 IEEE Military Communications Conference
Country/Territory	United States
City	Monterey, CA
Period	10/13/03 → 10/16/03

Cite this

@conference{a6cd2385642949e09aa94f0d2fb05389,

title = "Fusing intrusion data for detection and containment",

abstract = "Fusing information from diverse detectors remains a challenge in the field of intrusion detection. We apply data fusion techniques to fuse alerts generated by different detectors that signal the potential presence of an intrusion. Data fusion has been shown to result in a decrease in false positives while achieving an improved level of detection. By combining detections from fusers on distributed hosts, a system can also detect and track the spread of an intrusion. We proceed to analyze the response time requirements of such a distributed containment system by including an explicit containment parameter in the spreading formulation.",

author = "Mallikarjun Shankar and Nageswara Rao and Stephen Batsell",

year = "2003",

language = "English",

pages = "741--746",

note = "MILCOM 2003 - 2003 IEEE Military Communications Conference ; Conference date: 13-10-2003 Through 16-10-2003",

}

TY - CONF

T1 - Fusing intrusion data for detection and containment

AU - Shankar, Mallikarjun

AU - Rao, Nageswara

AU - Batsell, Stephen

PY - 2003

Y1 - 2003

N2 - Fusing information from diverse detectors remains a challenge in the field of intrusion detection. We apply data fusion techniques to fuse alerts generated by different detectors that signal the potential presence of an intrusion. Data fusion has been shown to result in a decrease in false positives while achieving an improved level of detection. By combining detections from fusers on distributed hosts, a system can also detect and track the spread of an intrusion. We proceed to analyze the response time requirements of such a distributed containment system by including an explicit containment parameter in the spreading formulation.

AB - Fusing information from diverse detectors remains a challenge in the field of intrusion detection. We apply data fusion techniques to fuse alerts generated by different detectors that signal the potential presence of an intrusion. Data fusion has been shown to result in a decrease in false positives while achieving an improved level of detection. By combining detections from fusers on distributed hosts, a system can also detect and track the spread of an intrusion. We proceed to analyze the response time requirements of such a distributed containment system by including an explicit containment parameter in the spreading formulation.

UR - http://www.scopus.com/inward/record.url?scp=3142742657&partnerID=8YFLogxK

M3 - Paper

AN - SCOPUS:3142742657

SP - 741

EP - 746

T2 - MILCOM 2003 - 2003 IEEE Military Communications Conference

Y2 - 13 October 2003 through 16 October 2003

ER -

Fusing intrusion data for detection and containment

Abstract

Conference

Other files and links

Fingerprint

Cite this