|
DRUM >
Institute for Systems Research >
Institute for Systems Research Technical Reports >
Please use this identifier to cite or link to this item:
http://hdl.handle.net/1903/6359
|
| Title: | Detection and Classification of Network Intrusions using Hidden Markov Models |
| Authors: | Radosavac, Svetlana |
| Advisors: | Baras, John S. |
| Department/Program: | ISR |
| Type: | Thesis |
| Keywords: | Global Communication Systems |
| Issue Date: | 2003 |
| Series/Report no.: | ISR; MS 2003-1 |
| Abstract: | With the increased use of networked computers for criticalsystems, network security is attracting increasing attention andcomputer network intrusions have become a significant threat tocommunication and computer networks in recent years.<p>The models developed in this thesis represent the first step inmodelling of network attacks. The thesis demonstrates that modelsthat represent network attacks can be developed and used for bothdetection and classification. In this thesis we put emphasis ondetection and classification of network intrusions and attacksusing Hidden Markov Models and training on anomalous sequences. Wetest several algorithms, apply different rules for classificationand evaluate the relative performance of these. We put emphasis onone particular classification algorithm that is not dependent ondata set properties. Several of the attack examples presentedexploit buffer overflow vulnerabilities, due to availability ofdata for such attacks. We demonstrate that models for oth... |
| URI: | http://hdl.handle.net/1903/6359 |
| Appears in Collections: | Institute for Systems Research Technical Reports
|
Files in This Item:
| File |
Description |
Size | Format | No. of Downloads |
|---|
| MS_2003-1.pdf | | 711Kb | Adobe PDF | 231 | View/Open |
|
Show full item record
All items in DRUM are protected by copyright, with all rights reserved.
|
