자가적응모듈과 퍼지인식도가 적용된 하이브리드 침입시도탐지모델
An Hybrid Probe Detection Model using FCM and Self-Adaptive Module
2
조회
0
다운로드
7
인용
0
참고문헌
키워드
초록
Nowadays, networked computer systems play an increasingly important role in our society and its economy. They have become the targets of a wide array of malicious attacks that invariably turn into actual intrusions. This is the reason computer security has become an essential concern for network administrators. Recently, a number of Detection/Prevention System schemes have been proposed based on various technologies. However, the techniques, which have been applied in many systems, are useful only for the existing patterns of intrusion. Therefore, probe detection has become a major security protection technology to detection potential attacks. Probe detection needs to take into account a variety of factors ant the relationship between the various factors to reduce false negative & positive error. It is necessary to develop new technology of probe detection that can find new pattern of probe. In this paper, we propose an hybrid probe detection using Fuzzy Cognitive Map(FCM) and Self Adaptive Module(SAM) in dynamic environment such as Cloud and IoT. Also, in order to verify the proposed method, experiments about measuring detection rate in dynamic environments and possibility of countermeasure against intrusion were performed. From experimental results, decrease of false detection and the possibilities of countermeasures against intrusions were confirmed.
Abstract
Nowadays, networked computer systems play an increasingly important role in our society and its economy. They have become the targets of a wide array of malicious attacks that invariably turn into actual intrusions. This is the reason computer security has become an essential concern for network administrators. Recently, a number of Detection/Prevention System schemes have been proposed based on various technologies. However, the techniques, which have been applied in many systems, are useful only for the existing patterns of intrusion. Therefore, probe detection has become a major security protection technology to detection potential attacks. Probe detection needs to take into account a variety of factors ant the relationship between the various factors to reduce false negative & positive error. It is necessary to develop new technology of probe detection that can find new pattern of probe. In this paper, we propose an hybrid probe detection using Fuzzy Cognitive Map(FCM) and Self Adaptive Module(SAM) in dynamic environment such as Cloud and IoT. Also, in order to verify the proposed method, experiments about measuring detection rate in dynamic environments and possibility of countermeasure against intrusion were performed. From experimental results, decrease of false detection and the possibilities of countermeasures against intrusions were confirmed.
참고문헌 (12)
- B. Mukherjee, "Network intusion detection", IEEE Network, 8(3), pp.26~41 (1994)
- M. Stula, "Fuzzy cognitive map for decision support in image post-processing", 18th International Conference on systems signal and image processing, 11, pp.4~9 (2011)
- S. Lee, "A Probe Detection Model using the Analysis of the Fuzzy Cognitive Maps", International Conference Cyber and Security, 3480, pp.320~328 (2005)
- J. Park, "A Whitelist-based Scheme for Detecting and Preventing Unauthorized AP Acess using Mobile Device", Journal of the Korea Information Communications Society, 10(3), pp.632~640 (2012)
- W. Xiang, "Application of BP neural network with L-M algorithm in power transformer fault diagnosis", International Power system protection and control, 10(1), pp.100~104 (2011)
- S. Y. Lee, "An Adaptive Probe Detection Model using Fuzzy Cognitive Maps", Ph. D, pp.2003
- Y. Brum, "Software Engineering for Self Adaptive Systems", pp.48~70 (2009), Springer-Verlag
- J. Moon, "A Malware Detection Application Framework Based on Normal Behavior", The Journal of the Convergence on Culure, 2(1), pp.79~85 (2016)
- 조성래, "의사결정트리와 인공 신경망 기법을 이용한 침입탐지 효율성 비교 연구", (사)디지털산업정보학회 논문지, 11(4), pp.33~45 (2015), (사)디지털산업정보학회[DOI]
- 양환석, "프로토콜 기반 분산 침입탐지시스템 설계 및 구현", (사)디지털산업정보학회 논문지, 8(1), pp.81~87 (2012), (사)디지털산업정보학회
- "Ostinato"[URL]
- "Hping3"[URL]
