14th International CSI Computer Conference-CSICC 2009 , 2009-10-20

Title : ( Ontology-based Distributed Intrusion Detection System )

Authors: Fateme Abdoli , mohsen kahani ,

Citation: BibTeX | EndNote

In this paper we discussed about utilizing methods and techniques of semantic web in the Intrusion Detection Systems. To extract semantic relations between computer attacks and intrusions in a Distributed Intrusion Detection System, we use ontology. Protégé software is our selected software for building ontology. In addition, we utilized Jena framework to make interaction between MasterAgent and attacks ontology. Our Distributed Intrusion Detection System is a network which contains some IDSagents and a special MasterAgent. MasterAgent contains our proposed attacks ontology. Every time a IDSagent detects an attack or new suspected condition, it sends detection\\\\\\\'s report for MasterAgent. Therefore, it can extract the semantic relationship among computer attacks and suspected situations in the network with proposed ontology. Finally, the experience shows that the pruposed system reduced the rate of false positive and false negative.

Keywords

, Denial of Service attack, Intrusion Detection System,
برای دانلود از شناسه و رمز عبور پرتال پویا استفاده کنید.

@inproceedings{paperid:1013412,
author = {Abdoli, Fateme and Kahani, Mohsen},
title = {Ontology-based Distributed Intrusion Detection System},
booktitle = {14th International CSI Computer Conference-CSICC 2009},
year = {2009},
location = {Tehran, IRAN},
keywords = {Denial of Service attack; Intrusion Detection System; Ontology},
}

[Download]

%0 Conference Proceedings
%T Ontology-based Distributed Intrusion Detection System
%A Abdoli, Fateme
%A Kahani, Mohsen
%J 14th International CSI Computer Conference-CSICC 2009
%D 2009

[Download]