Title:  Network Intrusion Detection by Combining One-class Classifiers
Internal authors: 
Issue Date:  2005
Journal: 
LECTURE NOTES IN COMPUTER SCIENCE  
Abstract:  Intrusion Detection Systems (IDSs) play an essential role in today’s network security infrastructures. Their main aim is in finding out traces of intrusion attempts alerting the network administrator as soon as possible, so that she can take suitable countermeasures. In this paper we propose a misuse-based Network Intrusion Detection architecture in which we combine multiple one-class classifiers. Each one-class classifier is trained in order to discriminate between a specific attack and all other traffic patterns. As attacks can be grouped in classes according to a taxonomy, for each attack class a number of one-class classifiers are trained, each one specialized to a specific attack. The proposed multiple classifier architecture combine the outputs of one class classifiers to attain an IDS based on generalized attack signatures. The aim is in labelling a pattern either as normal or as belonging to one of the attack classes according to the adopted taxonomy. The potentials and effectiveness of the proposed approach are analysed and discussed.
URI:  http://hdl.handle.net/11584/104347
ISBN:  978-354028869-5
Type: 4.1 Contributo in Atti di convegno

Files in This Item:
There are no files associated with this item.

Questionnaire and social

Share on: