Abstract:With the development of Information technology and the popularization of Internet, whenever and wherever possible, people can connect to the Internet optionally. Meanwhile, the security of network traffic is threatened by various of online malicious behaviors. The aim of an intrusion detection system (IDS) is to detect the network behaviors which are diverse and malicious. Since a conventional firewall cannot detect most of the malicious behaviors, such as malicious network traffic or computer abuse, some advanced learning methods are introduced and integrated with intrusion detection approaches in order to improve the performance of detection approaches. However, there are very few related studies focusing on both the effective detection for attacks and the representation for malicious behaviors with graph. In this paper, a novel intrusion detection approach IDBFG (Intrusion Detection Based on Feature Graph) is proposed which first filters normal connections with grid partitions, and then records the patterns of various attacks with a novel graph structure, and the behaviors in accordance with the patterns in graph are detected as intrusion behaviors. The experimental results on KDD-Cup 99 dataset show that IDBFG performs better than SVM (Supprot Vector Machines) and Decision Tree which are trained and tested in original feature space in terms of detection rates, false alarm rates and run time.

An Intrusion Response Method Based on Attack Graph

Think That Attackers Think: Using First-Order Theory of Mind in Intrusion Response System.

Decision on Optimal Active Response Based on Intrusion Graph

A Response Method for Cooperative Intrusions Based on the Attack Group Model

A Study and Design of Automated Intrusion Response System Based on Risk

Intrusive intention recognition based on attack path graph

Dynamic game based intrusion response model

A Network Attack Plan Recognition Algorithm Based on the Extended Goal Graph

An Attack Graph Model Using Greedy Policy

Research on the Automated Intrusion Response Systems

Design and Implementation of Intrusion Automated Response System

Intrusion Response Decision Model Based on Effect Evaluation Feedback

A Study of Automated Intrusion Response Systems

Research and Design on Intelligent Agent Intrusion Response System

NAIR: A Novel Automated Intrusion Response System Based on Decision Making Approach

Agcm: A Multi-Stage Attack Correlation and Scenario Reconstruction Method Based on Graph Aggregation

Recognition of Attack Strategy Based on FP-Growth Algorithm and Compensatory Intrusion Evidence

An Intrusion Detection Algorithm Based On Feature Graph

An Adaptive Markov Strategy for Effective Network Intrusion Detection.

Research on Adaptive Intrusion Response System Based on Active-Network

A graph based system for multi-stage attacks recognition