Bayesian decision aggregation in collaborative intrusion detection networks

Carol J. Fung; Quanyan Zhu; Raouf Boutaba; Tamer Başar

doi:10.1109/NOMS.2010.5488489

Bayesian decision aggregation in collaborative intrusion detection networks

Carol J. Fung, Quanyan Zhu, Raouf Boutaba, Tamer Başar

Electrical and Computer Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Cooperation between intrusion detection systems (IDSs) allow collective information and experience from a network of IDSs to be shared for improving the accuracy of detection. A critical component of a collaborative network is the mechanism of feedback aggregation in which each IDS makes an overall security evaluation based on peer opinions and assessments. In this paper, we propose a collaboration framework for intrusion detection networks (CIDNs) and use a Bayesian approach for feedback aggregation by minimizing the combined costs of missed detection and false alarm. The proposed model is highly scalable, robust, and cost effective. Experimental results demonstrate an improvement in the true positive detection rate and a reduction in the average cost of our mechanism compared to existing models.

Original language	English (US)
Title of host publication	Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010
Publisher	IEEE Computer Society
Pages	349-356
Number of pages	8
ISBN (Print)	9781424453672
DOIs	https://doi.org/10.1109/NOMS.2010.5488489
State	Published - 2010
Event	12th IEEE/IFIP Network Operations and Management Symposium, NOMS 2010 - Osaka, Japan Duration: Apr 19 2010 → Apr 23 2010

Publication series

Name	Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010

Other

Other	12th IEEE/IFIP Network Operations and Management Symposium, NOMS 2010
Country/Territory	Japan
City	Osaka
Period	4/19/10 → 4/23/10

ASJC Scopus subject areas

Computer Networks and Communications
Management Science and Operations Research

Access to Document

10.1109/NOMS.2010.5488489

Cite this

Fung, C. J., Zhu, Q., Boutaba, R., & Başar, T. (2010). Bayesian decision aggregation in collaborative intrusion detection networks. In Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010 (pp. 349-356). Article 5488489 (Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010). IEEE Computer Society. https://doi.org/10.1109/NOMS.2010.5488489

Bayesian decision aggregation in collaborative intrusion detection networks. / Fung, Carol J.; Zhu, Quanyan; Boutaba, Raouf et al.
Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010. IEEE Computer Society, 2010. p. 349-356 5488489 (Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Fung, CJ, Zhu, Q, Boutaba, R & Başar, T 2010, Bayesian decision aggregation in collaborative intrusion detection networks. in Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010., 5488489, Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010, IEEE Computer Society, pp. 349-356, 12th IEEE/IFIP Network Operations and Management Symposium, NOMS 2010, Osaka, Japan, 4/19/10. https://doi.org/10.1109/NOMS.2010.5488489

Fung CJ, Zhu Q, Boutaba R, Başar T. Bayesian decision aggregation in collaborative intrusion detection networks. In Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010. IEEE Computer Society. 2010. p. 349-356. 5488489. (Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010). doi: 10.1109/NOMS.2010.5488489

@inproceedings{da6c056e98ae4f3298e6f8bc55f06f10,

title = "Bayesian decision aggregation in collaborative intrusion detection networks",

abstract = "Cooperation between intrusion detection systems (IDSs) allow collective information and experience from a network of IDSs to be shared for improving the accuracy of detection. A critical component of a collaborative network is the mechanism of feedback aggregation in which each IDS makes an overall security evaluation based on peer opinions and assessments. In this paper, we propose a collaboration framework for intrusion detection networks (CIDNs) and use a Bayesian approach for feedback aggregation by minimizing the combined costs of missed detection and false alarm. The proposed model is highly scalable, robust, and cost effective. Experimental results demonstrate an improvement in the true positive detection rate and a reduction in the average cost of our mechanism compared to existing models.",

author = "Fung, {Carol J.} and Quanyan Zhu and Raouf Boutaba and Tamer Ba{\c s}ar",

year = "2010",

doi = "10.1109/NOMS.2010.5488489",

language = "English (US)",

isbn = "9781424453672",

series = "Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010",

publisher = "IEEE Computer Society",

pages = "349--356",

booktitle = "Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010",

}

TY - GEN

T1 - Bayesian decision aggregation in collaborative intrusion detection networks

AU - Fung, Carol J.

AU - Zhu, Quanyan

AU - Boutaba, Raouf

AU - Başar, Tamer

PY - 2010

Y1 - 2010

N2 - Cooperation between intrusion detection systems (IDSs) allow collective information and experience from a network of IDSs to be shared for improving the accuracy of detection. A critical component of a collaborative network is the mechanism of feedback aggregation in which each IDS makes an overall security evaluation based on peer opinions and assessments. In this paper, we propose a collaboration framework for intrusion detection networks (CIDNs) and use a Bayesian approach for feedback aggregation by minimizing the combined costs of missed detection and false alarm. The proposed model is highly scalable, robust, and cost effective. Experimental results demonstrate an improvement in the true positive detection rate and a reduction in the average cost of our mechanism compared to existing models.

AB - Cooperation between intrusion detection systems (IDSs) allow collective information and experience from a network of IDSs to be shared for improving the accuracy of detection. A critical component of a collaborative network is the mechanism of feedback aggregation in which each IDS makes an overall security evaluation based on peer opinions and assessments. In this paper, we propose a collaboration framework for intrusion detection networks (CIDNs) and use a Bayesian approach for feedback aggregation by minimizing the combined costs of missed detection and false alarm. The proposed model is highly scalable, robust, and cost effective. Experimental results demonstrate an improvement in the true positive detection rate and a reduction in the average cost of our mechanism compared to existing models.

UR - http://www.scopus.com/inward/record.url?scp=77957786523&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=77957786523&partnerID=8YFLogxK

U2 - 10.1109/NOMS.2010.5488489

DO - 10.1109/NOMS.2010.5488489

M3 - Conference contribution

AN - SCOPUS:77957786523

SN - 9781424453672

T3 - Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010

SP - 349

EP - 356

BT - Proceedings of the 2010 IEEE/IFIP Network Operations and Management Symposium, NOMS 2010

PB - IEEE Computer Society

T2 - 12th IEEE/IFIP Network Operations and Management Symposium, NOMS 2010

Y2 - 19 April 2010 through 23 April 2010

ER -

Bayesian decision aggregation in collaborative intrusion detection networks

Abstract

Publication series

Other

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this