Deakin University

File(s) not publicly available

A bio-inspired host-based multi-engine detection system with sequential pattern recognition

conference contribution
posted on 2011-12-01, 00:00 authored by Frank JiangFrank Jiang, M Frater, J Hu
In this paper, multiple detection engines with multi-layered intrusion detection mechanisms are proposed. The principle is to coordinate the results from each single-engine intrusion alert system, by seamlessly integrating with the multiple layered distributed service-oriented structure. An improved hidden Markov model (HMM) is created for the detection engine which is capable of the immunology-based self/nonself discrimination. The classifications of normal and abnormal behaviours of system calls are further examined by an advanced fuzzy-based inference process called HPSOWM. Considering a real benchmark dataset from the public domain, our experimental results show that the proposed scheme can greatly shorten the training time of HMM and reduce the false positive rate significantly. The proposed HPSOWM especially works for the efficient classification of unknown behaviors and malicious attacks. © 2011 IEEE.



145 - 150



Publication classification

E1.1 Full written paper - refereed

Title of proceedings

Proceedings - IEEE 9th International Conference on Dependable, Autonomic and Secure Computing, DASC 2011

Usage metrics

    Research Publications


    No categories selected