• DocumentCode
    2742391
  • Title

    Enhancing MAC Security Model with Meta-policy Approach Using an Intelligent Anomaly Based HIDS

  • Author

    Shahbazi, Zeinab ; Azmi, Reza ; Mahmoudi, Mohammad

  • Author_Institution
    Sci. & Res. Branch, Comput. Dept., Islamic Azad Univ., Tehran, Iran
  • fYear
    2011
  • fDate
    25-27 Jan. 2011
  • Firstpage
    40
  • Lastpage
    43
  • Abstract
    This paper exhibits a new structure based on a meta-policy approach using an intelligent anomaly based host based intrusion detection system, These access control decisions are decided in agreement with a meta-policy. The combination of policy and host based intrusion detection system approach depends on operating systems integrating with mandatory access control. The proposed structure controls a extended set of attacks and provides the management of the system policy, compared to other existing access control approaches and policy based host based intrusion detection system techniques. Items are given about methods used for the meta-policy, and implementation of the structure. We used genetic algorithm to try to select what was the best set of features and chose a Bayesian network, that is trained by using the selected system log on operating system.
  • Keywords
    authorisation; belief networks; genetic algorithms; operating systems (computers); Bayesian network; MAC security model enhancement; genetic algorithm; host based intrusion detection system; intelligent anomaly based HIDS; mandatory access control; meta policy approach; operating system; Intelligent systems; Bayesian Network; Genetic Algorithm (GA); Host Based Intrusion Detection System (HIDS); Mandatory Access Control (MAC); Meta-Policy; SELinux; Security Context;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Intelligent Systems, Modelling and Simulation (ISMS), 2011 Second International Conference on
  • Conference_Location
    Kuala Lumpur
  • Print_ISBN
    978-1-4244-9809-3
  • Type

    conf

  • DOI
    10.1109/ISMS.2011.17
  • Filename
    5730317