Behavioral Intrusion Detection

Abstract. In this paper we describe anomaly-based intrusion detection as a specialized case of the more general behavior detection problem. We draw concepts from the field of ethology to help us describe and characterize behavior and interactions. We briefly introduce a general framework for behavior detection and an algorithm for building a Markov-based model of behavior. We then apply the framework creating a proof-of-concept intrusion detection system (IDS) that can detect normal and intrusive behavior.

• Type: Conference
• Year: 2004
• Where: ISCIS
• Authors: Stefano Zanero
• Keywords: Behavior Detection, Behavior Detection Problem, Intrusion Detection, ISCIS 2004