 |
7th Annual IEEE Information Assurance Workshop 21-23 June 2006 "The West Point Workshop" United States Military Academy, West Point, New York |
| Chair: LTC Ronald Dodge, Ronald.Dodge@usma.edu | |
|
|
|
Applying Data Mining of Fuzzy Association Rules to Network Intrusion DetectionAly El-Semary, Janica Edmonds, Jesus Gonzalez-Pino and Mauricio PapaThe 7th IEEE Information Assurance Workshop (IAWorkshop 2006)West Point, New York, USA, June 21-23, 2006
AbstractThis paper describes the use of fuzzy logic in an implementation of an intelligent intrusion detection system. The system uses a data miner that integrates Apriori and Kuok’s algorithms to produce fuzzy logic rules capturing features of interest in network traffic. Using an inference engine, implemented using FuzzyJess, the intrusion detection system evaluates these rules and gives network administrators indications of the firing strength of the ruleset. The resulting system is capable of adapting to changes in attack signatures. In addition, by identifying relevant network traffic attributes, the system has the inherent ability to provide abstract views that support network security analysis. Examples and experimental results using intrusion detection datasets from MIT Lincoln Laboratory demonstrate the potential of the approach.
|
|
