DocumentCode
2785697
Title
Swarm-Based Knowledge Discovery for Intrusion Behavior Discovering
Author
Cui, Xiaohui ; Beaver, Justin ; Potok, Thomas
Author_Institution
Comput. Sci. & Eng. Div., Oak Ridge Nat. Lab., Oak Ridge, TN, USA
fYear
2010
fDate
10-12 Oct. 2010
Firstpage
270
Lastpage
275
Abstract
In this research, we developed a technique, the Swarm-based Visual Data Mining approach (SVDM), that will help user to gain insight into the Intrusion Detection System (IDS) alert event data stream, come up with new hypothesis, and verify the hypothesis via the interaction between the human and the system. This novel malicious user detection system can efficiently help security officer detect anomaly behaviors of malicious user in the high dimensional time dependent state spaces. This system´s visual representations exploit the human being´s innate ability to recognize patterns and utilize this ability to help security manager understand the relationships between seemingly discrete security breaches.
Keywords
data mining; data visualisation; pattern recognition; security of data; IDS; SVDM; discrete security; event data stream; high dimensional time dependent state spaces; intrusion behavior discovering; intrusion detection system; malicious user detection system; pattern recognition; swarm-based knowledge discovery; swarm-based visual data mining approach; system visual representations; Data mining; Data visualization; History; Humans; IP networks; Security; Visualization; data mining; intrusion; swarm; visualization;
fLanguage
English
Publisher
ieee
Conference_Titel
Cyber-Enabled Distributed Computing and Knowledge Discovery (CyberC), 2010 International Conference on
Conference_Location
Huangshan
Print_ISBN
978-1-4244-8434-8
Electronic_ISBN
978-0-7695-4235-5
Type
conf
DOI
10.1109/CyberC.2010.56
Filename
5617135
Link To Document