(Enter summary)
Abstract: Anomaly detection involves characterizing the behaviors of individuals or systems and recognizing behavior that is outside the norm. This paper describes some preliminary results concerning the robustness and generalization capabilities of machine learning methods in creating user profiles based on the selection and subsequent classification of command line arguments. We base our method on the belief that legitimate users can be classified into categories based on the percentage of commands... (Update)
Cited by: More
Bibliography of Self-Organizing Map (SOM) Papers.. - Merja Oja, Samuel.. (2002)
(Correct)
Misuse Detection for Information Retrieval Systems - Rebecca Cathey Ling
(Correct)
Similar documents (at the sentence level):
78.2%: A Hybrid Approach to the Profile Creation and Intrusion.. - Marin, Ragsdale, Surdu (2001)
(Correct)
Active bibliography (related documents): More All
0.7: Intrusion Detection: A Bibliography - Mé, Michel (2001)
(Correct)
0.4: Ensemble Learning for Intrusion Detection in - Luca (2002)
(Correct)
0.3: A Multiagent Approach to Outbound Intrusion Detection - Mandujano (2004)
(Correct)
Similar documents based on text: More All
0.2: Simulation And Agent Cooperation In Dynamic Plan Building - John Hill Department (2001)
(Correct)
0.2: Implementation Oftheanticipatory Planning Support System - John Hill Department
(Correct)
0.2: The Iwar Range: A Laboratory For Undergraduate.. - Schafer, Ragsdale.. (2001)
(Correct)
BibTeX entry: (Update)
Jack Marin, Daniel Ragsdale, and John Surdu, A hybrid approach to the profile creation and intrusion detection, DARPA Information Survivability Conference and Exposition (DISCEX II'01) 1 (2001). http://citeseer.ist.psu.edu/marin01hybrid.html More
@inproceedings{ marin01hybrid,
author = "John A. Marin and Daniel Ragsdale and John Surdu",
title = "A Hybrid Approach to Profile Creation and Intrusion Detection",
booktitle = "Proc. of {DARPA} Information Survivability Conference and Exposition",
location = "Anaheim, CA",
month = jun # " 12--14,",
year = "2001",
url = "citeseer.ist.psu.edu/marin01hybrid.html",
url = "http://citeseer.nj.nec.com/marin01hybrid.html" }
Citations (may not include all citations):
1213
The Self-Organizing Map (context) - Kohonen - 1992
700
Self-Organization and Associative Memory (context) - Kohonen - 1987
197
Cluster Analysis for Applications (context) - Anderberg - 1973
142
A Sense of Self for Unix Processes
- Forrest, Hofmeyr et al. - 1996
121
An Intrusion-Detection Model (context) - Denning - 1987
121
Network Intrusion Detection (context) - Biswanath, Heberlein et al. - 1994
79
Computer Security Threat Monitoring and Surveillance (context) - Anderson - 1980
74
Computer Immunology
- Forrest, Hofmeyr et al. - 1997
70
Statistical Pattern Recognition with Neural Networks: Benchm.. (context) - Kohonen, Barna et al. - 1988
44
Concept Acquisition Through Representational Adjustment (context) - Schlimmer - 1987
41
The SRI IDES statistical anomaly detector (context) - Javitz, Valdes - 1991
41
Experience with EMERALD to Date
- Neumann, Porras - 1999
40
Temporal sequence learning and data reduction for anomaly de..
- Lane, Brodley - 1999
31
Detection of Anomalous Computer Session Activity (context) - Vaccaro, Liepins - 1989
28
ASAX: Software Architecture and Rule-based Language for Univ..
- Habra, Charlier et al. - 1992
28
Adaptive Realtime Anomaly Detection Using Inductively Genera.. (context) - Teng, Chen et al. - 1990
24
Intrusion Detection with Neural Networks
- Ryan, Lin et al. - 1998
21
Analysis of Four Uncertainty Calculi (context) - Henkind, Harrison - 1989
20
Detecting Unusual Program Behavior Using the Statistical Com.. (context) - Anderson, Lunt et al. - 1995
19
Learning Vector Quantization for Pattern Recognition (context) - Kohonen - 1986
18
A Framework for Constructing Features and Models for Intrusi..
- Lee, Stolfo - 2000
17
Design and Implementation of a Scalable Intrusion Detection ..
- Jou, Gong et al. - 2000
15
MacMillan Technical Publishing (context) - Bace, Detection - 2000
13
Fuzzy Logic: Intelligence (context) - Yen, Lengari - 1999
12
Statistical Foundations of Audit Trail Analysis for the Dete.. (context) - Helman, Liepins - 1993
11
Intrusion Detection via System Call Traces (context) - Kosoresow, Hofmeyr - 1997
9
Proactive Anomaly Detection Using Distributed Intelligent Ag.. (context) - Thottan, Ji - 1998
9
A Data Mining and CIDF Based Approach for Detecting Novel an..
- Lee, Nimbalkar et al.
7
Intrusion detection Applying machine learning to Solaris aud..
- Endler - 1998
6
Real-time Anomaly detection Using a Nonparametric Pattern Re.. (context) - Lankewicz, Benard - 1991
5
Intelligent Agents for Intrusion Detection and Countermeasur.. (context) - Helmer, Wong et al. - 1998
3
Training a Neuralnetwork Based Intrusion Detector to Recogni..
- Lee, Heinbuch - 2000
3
Multiple Self-Organizing Maps for Intrusion Detection (context) - Rhodes, Mahaffey et al. - 2000
2
EMERALD Network Intrusion Detection Project Description (context) - Porras
2
EEG Classification by Learning Vector Classification (context) - Flotzinger, Kalcher et al. - 1992
2
Anomaly Detection - A Soft Computing Approach (context) - Lin - 1994
2
Nonparametric Classification Using Learning Vector Quantizat.. (context) - LaVigna - 1989
2
MA: PWS-Kent Publishing Co (context) - Giarratno, Riley - 1989
Documents on the same site (http://www.ai.usma.edu/research.html): More
Synchronized Simulations in Planning Systems - Hill, Vaglia, Surdu, Pooch (2001)
(Correct)
A Methodology for Using Intelligent Agents to Apply Simulation.. - Surdu, Pooch
(Correct)
A Hybrid Approach to the Profile Creation and Intrusion.. - Marin, Ragsdale, Surdu (2001)
(Correct)
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC