Neural network approach for misuse and anomaly intrusion detection

作者：Yao Yu; Yu Ge; Gao Fu-Xiang

来源：Wuhan University Journal of Natural Sciences, 2005, 10(1): 115-118.

An MLPCMulti-Layer Perceptron/Elman neural network is proposed in this paper, which realizes classification with memory of past events using the real-time classification of MLP and the memorial functionality of Elman. The system's sensitivity for the memory of past events can be easily reconfigured without retraining the whole network. This approach can be used for both misuse and anomaly detection system. The intrusion detection systems (IDSs) using the hybrid MLP/Elman neural network are evaluated by the intrusion detection evaluation data sponsored by U.S. Defense Advanced Research Projects Agency (DARPA). The results of experiment are presented in Receiver Operating Characteristic (ROC) curves. The capabilities of these IDSs to identify Deny of Service (DOS) and probing attacks are enhanced.

• 出版日期2005