Petrovic, SlovodanÁlvarez, GonzaloOrfila, AgustínCarbó Rubiera, Javier Ignacio2010-10-292010-10-292004-09Avances en criptología y seguridad de la información. Actas de la VIII Reunión Española sobre Criptología y Seguridad de la Información. Madrid: Díaz de Santos, 2004, pp. 507-51684-7978-650-7https://hdl.handle.net/10016/9544Proceeding of: Reunión Española sobre Criptología y Seguridad de la Información (RECSI '04)Leganés, MadridA predictor-corrector intrusion detection system is proposed, whose predictors are various clustering algorithms with different initial parameters that operate in parallel on the current data set. The decisions whether abnormal behaviour is detected in the current data set are made by a number of assessors that implement various clustering quality evaluation techniques. The manager of the system estimates the quality of decision making from the pieces of information obtained a posteriori and then varies the parameters of the predictors and/or the assessors in order to achieve better overall performance of the system. In such a way, the intelligence of the system is delegated to higher decision making levels, which improves the effectiveness. Experimental results regarding the effectiveness of the system are given with the KDD CUP 1999 test data as the reference data set. These results show that very good overall performance can be achieved by selecting properly various system parameters.application/pdfeng© Benjamín Ramos Álvarez y Arturo Ribagorda Garnacho et al., 2004Anomaly detectionClusteringDecision makingIntrusion detection systemconference paperInformáticaopen access507516Avances en criptología y seguridad de la información. Actas de la VIII Reunión Española sobre Criptología y Seguridad de la Información