P. Helman and J. Bhangoo. A statistically based system for prioritizing information exploration under uncertainty. IEEE Transactions on Systems, Man and Cybernetics, Part A: Systems and Humans, 27(4):449--466, July 1997. Home/Search Document Not in Database Summary Related Articles Check |
This paper is cited in the following contexts:
Detecting Intrusions Using System Calls: Alternative.. - Warrender, Forrest.. (1998) (58 citations) (Correct)
....frequencies for that sequence, but the approaches taken can be quite different, as the next two examples illustrate. Helman and Bhangoo propose ranking each sequence by comparing how often the sequence is known to occur in normal traces with how often it is expected to occur in intrusions [5]. Sequences occurring frequently in intrusions and or infrequently in normal traces are considered to be more suspicious. Unfortunately, frequencies of each sequence in all possible intrusions are not known a priori. We must, therefore, choose a frequency distribution for abnormal sequences by ....
....are considered to be more suspicious. Unfortunately, frequencies of each sequence in all possible intrusions are not known a priori. We must, therefore, choose a frequency distribution for abnormal sequences by assumption. Several possibilities for choosing this distribution are mentioned in [5], the simplest of which is to assume that the abnormal distribution is uniform. The Helman and Bhangoo method makes several assumptions that are problematic for the system call application. First, it assumes that the data are independent and stationary. Although a series of complete program traces ....
P. Helman and J. Bhangoo. A statistically based system for prioritizing information exploration under uncertainty. IEEE Transactions on Systems, Man and Cybernetics, Part A: Systems and Humans, 27(4):449--466, July 1997.
Detecting Intrusions Using System Calls: Alternative.. - Warrender, Forrest.. (1999) (58 citations) (Correct)
....frequencies for that sequence, but the approaches taken can be quite different, as the next two examples illustrate. Helman and Bhangoo propose ranking each sequence by comparing how often the sequence is known to occur in normal traces with how often it is expected to occur in intrusions [5]. Sequences occurring frequently in intrusions and or infrequently in normal traces are considered to be more suspicious. Unfortunately, frequencies of each sequence in all possible intrusions are not known a priori. We must, therefore, choose a frequency distribution for abnormal sequences by ....
....are considered to be more suspicious. Unfortunately, frequencies of each sequence in all possible intrusions are not known a priori. We must, therefore, choose a frequency distribution for abnormal sequences by assumption. Several possibilities for choosing this distribution are mentioned in [5], the simplest of which is to assume that the abnormal distribution is uniform. The Helman and Bhangoo method makes several assumptions that are problematic for the system call application. First, it assumes that the data are independent and stationary. Although a series of complete program ....
P. Helman and J. Bhangoo. A statistically based system for prioritizing information exploration under uncertainty. IEEE Transactions on Systems, Man and Cybernetics, Part A: Systems and Humans, 27(4):449--466, July 1997.
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC