Abstract:Traditional intrusion detection systems focus on low-level attacks, and only generate isolated alerts. They can't rind logical relations among alerts. In addition, IDS's accuracy is low, a lot of alerts are false alerts. So it is difficult for human users or intrusion response systems to understand the alerts and take appropriate actions. To solve this problem different intrusion scenario detection methods are proposed. In this paper a data mining method is used to find the attack scenarios. Firstly redundancy alerts are checked and deleted, then attack scenario patterns are mined by using the associate-rule algorithms which is an improved Apriori algorithm. These mined scenario patterns are used to rind attack scenarios. In (his paper 1999 DARPA intrusion detection scenario specific datasets are used as the experimental data and the corresponding results are shown. Compared with current scenario detection methods which depend on human knowledge to define attack scenarios, our methods use data mining method to find the scenarios automatically. Our experimental results demonstrate the potential of the proposed method.

Intrusion Patterns Mining in IDS

Study of Adaptive Intrusion Detection with Data Mining

New algorithm mining intrusion patterns

Research on Data Mining-based Intrusion Detection in Real-time Environment

Network Intrusion Detection Based on Behavior Patterns Mining

Research on Network Intrusion Detection Based on Data Mining

Research on Data Mining to System Log Audit Information in IDS

Application of association rules and sequence patterns algorithm to IDS

Application of Association Rules of Data Mining in IDS

Intrusion Detection Models Based on Data Mining

An efficient mining algorithm for dependent patterns

Application of Frequent Pattern Based Outlier Mining in Intrusion Detection

Intrusion Scenarios Detection Based on Data Mining

New method for intrusion features mining in IDS

A Sequential Pattern Mining Algorithm For Misuse Intrusion Detection

Anomaly Network Intrusion Detection System Based on Data Mining

Detection Approach for Malicious Behaviors Based on Data Mining

Implementation Of Sequence Patterns Mining In Network Intrusion Detection System

A Data Mining-based Approach for IDS Log Analysis

A Data Mining Based Design for the Detection Engine of the Intrusion Detection System

A Data Mining Based Intrusion Detection Model