Anomaly Intrusion Detection Based upon Anomalous Events and Soft Computing Technique
Yingbing Yu · International Journal of Machine Learning and Computing · 2015
Intrusion detection systems (IDSs) attempt to identify attacks by comparing new data to predefined signatures known to be malicious (misuse IDSs) or to a model of normal behavior (anomaly-based IDSs).This paper investigates a new model to more effectively detect anomaly intrusions from masqueraders.Events with different weight values based on historical data generated by Windows operating system are collected to build the normal user profiles as a template.A fuzzy system is applied to evaluate and classify the potential threat level from user new activities in a system.Experimental results show the promising results with a high detection rate of masqueraders and a low false alarm rate.