Citation

Wee, Yit Yin and Cheah, Wooi Ping and Tan, Shing Chiang and Wee, Kuok Kwee (2011) Causal discovery and reasoning for intrusion detection using Bayesian network. International Journal of Machine Learning and Computing, 1 (2). pp. 185-192. ISSN 2010-3700

Text 34.pdf Restricted to Repository staff only Download (730kB)

Abstract

Computer security is essential in information technology world today; confidentiality, availability and integrity of data are the aspects concerned. Firewall has been widely deployed as a protection but it is no longer adequate to against the intelligent intrusions and attacks which keep changing and transforming. A network intrusion detection and analysis system has been introduced in this paper to resolve the problems of data confidentiality, availability and integrity. The challenge of the study is; first, to model the network intrusion detection domain and second, to perform causal reasoning for intrusion detection and analysis based on the domain model constructed earlier. In this paper, a methodology has been proposed to resolve the two problems mentioned above. Both problems will be addressed under causal knowledge driven approach where intrusion detection is viewed as fault diagnosis and prognosis processes. We have proposed Bayesian network for the modeling of network intrusion domain. Also, powerful reasoning capabilities of Bayesian network have been applied to discover intrusion attacks. Since the capabilities of causal reasoning using Bayesian network have not been fully discovered in the domain of intrusion detection by most of the researchers before, this research work is to bridge the gap. From the results of the experiment, we have concluded that the capability of Bayesian learning is reasonably accurate and efficient.

Item Type:	Article
Subjects:	T Technology > T Technology (General)
Divisions:	Faculty of Information Science and Technology (FIST)
Depositing User:	Ms Rosnani Abd Wahab
Date Deposited:	15 Jan 2014 03:40
Last Modified:	10 Jul 2014 03:24
URII:	http://shdl.mmu.edu.my/id/eprint/4850

Downloads

Edit (login required)