Citation

Wee, Yit Yin and Cheah, Wooi Ping and Tan, Shing Chiang and Wee, Kuok Kwee (2012) Reasoning with cause and effect in intrusion detection. International Journal of Computer and Electrical Engineering, 4 (5). pp. 641-646. ISSN 1793-8163

Text 30.pdf Restricted to Repository staff only Download (727kB)

Abstract

Intrusion detection is an essential tool to protect hacking and unauthorized access in computer networks nowadays. Mechanisms used to attack keep evolving as the internet technology is improving. Hence, the task of differentiating authorized and unauthorized access has become more and more challenging. The modeling of network intrusion domain and causal reasoning for the intrusion detection has been proposed in this paper to address the security issues of a network. Bayesian network modeling with causal knowledge-driven approach has been selected for a network intrusion domain. Reasoning capabilities of Bayesian network have been adapted to perform detection and analysis in the domain.There are two main problems to be addressed in this paper: the first problem is to model the network intrusion domain and the second problem is to perform causal reasoning for intrusion detection and analysis. A methodology has been proposed to solve the two problems mentioned above. Intrusion detection is viewed as fault diagnosis in causal reasoning, and the analysis of the effect is viewed as fault prognosis. To address the first problem under causal knowledge-driven approach, we propose Bayesian network for the modeling of network intrusion domain. The second problem is addressed by applying the powerful reasoning capabilities of Bayesian network. The capabilities of causal reasoning using Bayesian network have not been fully discovered in the domain of intrusion detection. This research work is to bridge the gap.

Item Type:	Article
Subjects:	T Technology > T Technology (General)
Divisions:	Faculty of Information Science and Technology (FIST)
Depositing User:	Ms Rosnani Abd Wahab
Date Deposited:	13 Jan 2014 02:46
Last Modified:	10 Jul 2014 03:25
URII:	http://shdl.mmu.edu.my/id/eprint/4804

Downloads

Edit (login required)