Applying Term Weight Techniques to Event Log Analysis for Intrusion Detection

Public Deposited
Analytics

Downloadable Content

Download PDF
Request Version for Screen Reader
Last Modified
  • February 28, 2019
Creator
  • Reuning, John R.
    • Affiliation: School of Information and Library Science
Abstract
  • Strong similarities exist between intrusion detection and information retrieval. This paper explores the application of probabilistic information retrieval techniques to log analysis for host-based intrusion detection. Using information retrieval techniques may yield significant improvements to the performance of intrusion detection systems. This paper provides a brief review of current relevant research in intrusion detection and log analysis, introduces information retrieval methods appropriate for intrusion detection, and evaluates the effectiveness an experimental log analysis system using the 1999 DARPA Intrusion Detection Evaluation data sets. The system is based on Bayesian probability theory and uses a TF-IDF term weight measure to identify anomalies.
Date of publication
Subject
DOI
Resource type
Rights statement
  • In Copyright
Advisor
  • Losee, Robert
Degree granting institution
  • University of North Carolina at Chapel Hill
Language
Extent
  • 60 p.
Access right
  • Open access
Date uploaded
  • December 10, 2010

Relations

Parents:

This work has no parents.

Items

Thumbnail Title Date Uploaded Visibility Actions
file details Applying Term Weight Techniques to Event Log Analysis for Intrusion Detection. 2019-05-13 Public Download