arrow
返回

Architectures for Detecting Interleaved Multi-Stage Network Attacks Using Hidden Markov Models

delete2019-01-01
delete15
delete
OA
AI
T
Tawfeeq Shawly *
A
Ali Elghariani
J
Jason Kobes
A
Arif Ghafoor
DOI:10.1109/TDSC.2019.2948623delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
With the growing amount of cyber threats, the need for development of high-assurance cyber systems is becoming increasingly important. The objective of this article is to address the challenges of modeling and detecting sophisticated network attacks, such as multiple interleaved attacks. We present the interleaving concept and investigate how interleaving multiple attacks can deceive intrusion detection systems. Using one of the important statistical machine learning (ML) techniques, Hidden Markov Models (HMM), we develop two architectures that take into account the stealth nature of the interleaving attacks, and that can detect and track the progress of these attacks. These architectures deploy a database of HMM templates of known attacks and exhibit varying performance and complexity. For performance evaluation, in the presence of multiple multi-stage attack scenarios, various metrics are proposed which include (1) attack risk probability, (2) detection error rate, and (3) the number of correctly detected stages. Extensive simulation experiments are used to demonstrate the efficacy of the proposed architectures.
Keyword:
Hidden Markov models
Intrusion detection
Computer crime
Computer architecture
Complexity theory
Servers
Cyber systems
network security
intrusion detection
Hidden Markov Model
interleaved attacks
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Transactions on Dependable and Secure Computing 封面图
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
论文数:
2.4K
被引数:
9.6K

机构

K
King Abdulaziz University
学者数:
2.0W
论文数: 1.9W
被引数: 3.3W
Purdue University System 封面图
Purdue University System
学者数:
3.9W
论文数: 3.6W
被引数: 66
P
Purdue University
学者数:
2.7W
论文数: 2.1W
被引数: 147
学者 查看更多机构
引用论文

引用论文

err分享
err收藏
err分享
err收藏
Sub-picogram level sensitivity in HIV diagnostics achieved with the europium nanoparticle immunoassay through metal enhanced fluorescence
err2019-01-01
err0
errOAAI
errAditya Kurdekar; L. A. Avinash Chunduri; Mohan Kumar Haleyurgirisetty; Indira K. Hewlett; Venkataramaniah Kamisetti
err分享
err收藏
Ocriplasmin for symptomatic vitreomacular adhesion
err2015-09-25
err0
errOAAI
errJames E Neffendorf; Edward Pringle; Timothy L Jackson
err分享
err收藏
学者 查看更多内容