- 期刊
Reliable Alert Fusion of Multiple Intrusion Detection Systems
並列摘要
Alert Fusion is a process of combining alerts from multiple Intrusion Detection Systems to make a decision about the presence of attack or intrusion. A reliable decision from an alert fusion requires that Intrusion detectors involved in the fusion process generates fully reliable alerts. The unreliable alerts from intrusion detectors may completely misleads the decision making process. The existing alert fusion operators doesn't incorporate reliability of Intrusion detectors. In this work, we have proposed a novel alert fusion method which overcomes the limitations of existing fusion methods and fulfils the requirements for alert fusion domain. We have demostrated the results for two different approaches of deriving reliability value of intrusion system detector which are based on conflict and true positive rate of intrusion detectors. The results shows the robustness of proposed rule in fusing alerts from multiple intrusion detection system. Our proposed approach shows a drastic reduction in false positive rate without affecting the true positive rate.
被引用紀錄
延伸閱讀
- Kandeeban, S. S., & Rajesh, R. G. S. (2010). Integrated Intrusion Detection System Using Soft Computing. International Journal of Network Security, 10(2), 87-92. https://doi.org/10.6633/IJNS.201003.10(2).02
- 楊凱翔（2014）。Improvement of Network Intrusion Detection〔碩士論文，國立虎尾科技大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0028-1308201423552000
- 吳瑞成、黃鐘賢、周正全、洪朝陽（2009）。Vision-Based Intelligent Intrusion Detection System。電腦與通訊，(128)，30-37。https://doi.org/10.29917/CCLTJ.200906.0006
- Huang, H. P., Yang, F. C., Wang, M. T., & Chang, C. M. (2009). Intrusion Detection Based on Active Networks. Journal of Information Science and Engineering, 25(3), 843-859. https://doi.org/10.6688/JISE.2009.25.3.12
- 蔡秉任（2014）。Hybrid Intrusion Detection System Toward Unknown Attack Classification〔碩士論文，國立交通大學〕。華藝線上圖書館。https://doi.org/10.6842/NCTU.2014.00936