호스트 기반 침입탐지를 위한 데이터 마이닝 방법론

• 영문명: Data Mining Technology for Host-based Intrusion Detection
• 발행기관: 한국산업경영시스템학회
• 저자명: 소진(Jin Soh) 이상훈(Sang-Hoon Lee)
• 간행물 정보: 『한국산업경영시스템학회 학술대회』2002년 추계국제학술대회, 345~350쪽, 전체 6쪽
• 주제분류: 공학 > 산업공학
• 파일형태: PDF
• 발행일자: 2002.10.01

영문 초록

  Due to recent changes of computer & networks, the IDS(Intrusion Detection System) need to be developed for new intrusion patterns. The current IDS have limited on recognition and correspond to new intrusion patterns on detection speed for multi packet which dealing on the network. Therefore, new technology need to increasing efficiency and speed of detection speed requested.
  The aim of this research is the development of standard and systematic method on intrusion detection. The core idea is using data mining method to find bundle of patterns on networking program and user behavior patterns as well as apply the feature systems to calculate the classifiers which could recognize the well known or irregular intrusions.
  In this paper, we will recommend following steps to develop the intrusion detection system: First, we will learn the detection applying technique for multi intrusion cases. Second, we will use data mining technique which fast recognize the current intrusion patterns and new patterns. Third, to recognize intrusion patterns, information of packet on the network and recorded data on the host sessions have studied. Fourth, we will create regulations between intrusion and normal behavior by practical use of logged file abstraction programs. Fifth, we will analysis intrusion detection pattern based on the created regulations and study results.

목차

Abstract
1. 서론
2. 데이터 마이닝과 침입탐지 데이터
3. 데이터 마이닝 기술 및 알고리즘
4. 감사 자료을 통한 패턴분석
5. 결론 및 향후 연구
[참고문헌]