Alarm Correlation Analysis Method Based on Fuzzy Immune Evolution

Article Preview

Abstract:

This paper proposes a correlation analysis method based on fuzzy rules and artificial immune. Firstly, we adopt the alarms selection algorithm based on a sliding time window to improve the efficiency of selected alarm. Secondly, the analysis method based on fuzzy correlation rules is used to associate the known patterns static and rapidly. Then, using a method based on immune evolution to improve and adaptive the antibody so as to achieve the dynamic, intelligent correlation of unknown model. The experimental results in LLDOS1.0 and LLDOS2.0 show that the new method gets better accuracy than typical correlation methods, which can ensure the efficiency of correlation analysis and the adaptability of the correlation method.

You might also be interested in these eBooks

Info:

Periodical:

Pages:

6191-6195

Citation:

Online since:

May 2014

Export:

Price:

Permissions CCC:

Permissions PLS:

Сopyright:

© 2014 Trans Tech Publications Ltd. All Rights Reserved

Share:

Citation:

* - Corresponding Author

[1] LIU J, LI Y, MENG J, et al. Intrusion Detection System Based on Fusion Alerts Fuzzy Comprehensive Evaluation and Immune Evolution [J] Journal of Computational Information Systems, 2013, 9 (4):. 1509-1516.

Google Scholar

[2] Suarez-Tangil G, E Palomar, Pastrana S, et al. Artificial Immunity-based Correlation System [C] / / . SECRYPT 2011: 422-425.

Google Scholar

[3] Horstmann M, Elfers C, Sohr K. A Dynamic Knowledge Base for Intrusion Detection [C] / / Working Notes for the 2010 AAAI Workshop on Intelligent Security (SecArt) 2010:. 31.

Google Scholar

[4] Hunt JE, Cooke DE. Learning using an artificial immune system [J]. Journal of Network and Computer Applications, 1996, 19 (2) : 189-212.

DOI: 10.1006/jnca.1996.0014

Google Scholar

[5] J. Timmis Artificial Immune System: A novel data analysis technique inspired by the immune network theory [D]. Department of Computer Science, University of Wales, (2001).

Google Scholar

[6] ZENG J, LIU XJ, LI T, et al. Intrusion detection A novel approach learned from the change of antibody concentration in biological immune response [J]. Springer Applied Intelligence, 2011, 35 (1) : 41-62.

DOI: 10.1007/s10489-009-0202-y

Google Scholar

[7] Aishwarya S, Srinivasan N. EFFICIENT INTRUSION ALERT REDUCTION MECHANISM USING FUZZY ARTMAP [J]. International Journal of Engineering and Technology, (2013).

Google Scholar

[8] Sudha LR, Bhavani R. Performance comparison of SVM and kNN in automatic Classification of human Gait Patterns [J] Int J. Comput, 2012, 6 (1): 19-28.

Google Scholar

[9] Bateni M, Baraani A, Ghorbani A. Alert Correlation using artificial immune recognition system [J] International Journal of Bio-Inspired Computation, 2012, 4 (3):. 181-195.

DOI: 10.1504/ijbic.2012.047240

Google Scholar