DocumentCode
3309382
Title
IDES: a progress report [Intrusion-Detection Expert System]
Author
Lunt, Teresa F. ; Tamaru, Ann ; Gilham, Fred ; Jagannathan, R. ; Neumann, Peter G. ; Jalali, Caveh
Author_Institution
Comput. Sci. Lab., SRI Int., Menlo Park, CA, USA
fYear
1990
fDate
3-7 Dec 1990
Firstpage
273
Lastpage
285
Abstract
Describes a real-time intrusion-detection expert system (IDES), that observes user behavior on a monitored computer system and adaptively learns what is normal for individual users, groups, remote hosts, and the overall system behavior. Observed behavior is flagged as a potential intrusion if it deviates significantly from the expected behavior or if it triggers a rule in the expert-system rule base
Keywords
adaptive systems; expert systems; learning systems; real-time systems; security of data; IDES; adaptive systems; learning systems; monitored computer system; real-time intrusion-detection expert system; Computer science; Computer security; Computerized monitoring; Data security; Expert systems; Laboratories; Protection; Prototypes; Real time systems; Remote monitoring;
fLanguage
English
Publisher
ieee
Conference_Titel
Computer Security Applications Conference, 1990., Proceedings of the Sixth Annual
Conference_Location
Tucson, AZ
Print_ISBN
0-8186-2105-2
Type
conf
DOI
10.1109/CSAC.1990.143786
Filename
143786
Link To Document