Alert Fusion of Intrusion Detection systems using Fuzzy Dempster shafer Theory
Vrushank Shah, Akshai Aggarwal, Nirbhay Kumar Chaubey · Journal of Engineering Science and Technology Review · 2017
The Distributed intrusion detection systems are often used to enhance the performance and reliability of inference over single intrusion detection system.The Distributed IDS system uses a evidence theory to combine the evidences from multiple sources of information to make inference about the presence of an attack.The traditional evidence theory accounts for handling the uncertainty due to randomness.However, in the distributed IDS the inference provided by individual IDS are usually fuzzy in nature.The present work shows design of a framework for the fusion of alerts from multiple IDS involving both types of uncertainities.The modified framework is designed by incorporating fuzzy theory into the existing evidence theory and has been demonstrated against DARPA99 dataset.