Publication:
Improving network intrusion detection by means of domain-aware genetic programming

Simple item page
dc.affiliation.dptoUC3M. Departamento de Informáticaes
dc.affiliation.grupoinvUC3M. Grupo de Investigación: COSEC (Computer SECurity Lab)es
dc.contributor.authorBlasco Alís, Jorge
dc.contributor.authorOrfila Díaz-Pabon, Agustín
dc.contributor.authorRibagorda Garnacho, Arturo
dc.date.accessioned2010-11-12T11:10:51Z
dc.date.available2010-11-12T11:10:51Z
dc.date.issued2010-02
dc.descriptionProceeding of: International Conference on Availability, Reliability, and Security, 2010. ARES '10, 15-18 February 2010, Krakow, Poland
dc.description.abstractOne of the central areas in network intrusion detection is how to build effective systems that are able to distinguish normal from intrusive traffic. In this paper we explore the use of Genetic Programming (GP) for such a purpose. Although GP has already been studied for this task, the inner features of network intrusion detection have been systematically ignored. To avoid the blind use of GP shown in previous research, we guide the search by means of a fitness function based on recent advances on IDS evaluation. For the experimental work we use a well-known dataset (i.e. KDD- 99) that has become a standard to compare research although its drawbacks. Results clearly show that an intelligent use of GP achieves systems that are comparable (and even better in realistic conditions) to top state-of-the-art proposals in terms of effectiveness, improving them in efficiency and simplicity.
dc.description.sponsorshipThis work was partially supported by CDTI, Ministerio de Industria, Turismo y Comercio of Spain in collaboration with Telefónica I+D, Project SEGUR@ CENIT-2007 2004
dc.description.statusPublicado
dc.format.mimetypetext/plain
dc.format.mimetypeapplication/pdf
dc.identifier.bibliographicCitation2010 International Conference on Availability, Reliability and Security (ARES '10), pp. 327-332
dc.identifier.doi10.1109/ARES.2010.53
dc.identifier.isbn978-1-4244-5879-0
dc.identifier.publicationfirstpage327
dc.identifier.publicationlastpage332
dc.identifier.publicationtitle2010 International Conference on Availability, Reliability and Security (ARES '10)
dc.identifier.urihttps://hdl.handle.net/10016/9574
dc.language.isoeng
dc.publisherIEEE
dc.relation.eventdate15-18 February 2010
dc.relation.eventplaceKrakow (Poland)
dc.relation.eventtitleInternational Conference on Availability, Reliability, and Security. ARES '10,
dc.relation.publisherversionhttp://dx.doi.org/10.1109/ARES.2010.53
dc.rights© IEEE
dc.rights.accessRightsopen access
dc.subject.ecienciaInformática
dc.subject.otherEffectiveness
dc.subject.otherEfficiency
dc.subject.otherGP
dc.subject.otherIntrusion detection
dc.titleImproving network intrusion detection by means of domain-aware genetic programming
dc.typeconference paper*
dc.type.reviewPeerReviewed
dspace.entity.typePublication
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
orfila-improving-ares-2010.pdf
Size:
533.56 KB
Format:
Adobe Portable Document Format
Download
Collections
DI - COSEC - Artículos en Congresos Internacionales
DI - COSEC - Capítulos de Monografías