Poseidon: A 2-tier Anomaly-based Intrusion Detection System

D. Bolzoni; Emmanuele Zambon; Sandro Etalle; Pieter H. Hartel

Poseidon: A 2-tier Anomaly-based Intrusion Detection System

D. Bolzoni
, Emmanuele Zambon
, Sandro Etalle
, Pieter H. Hartel

Research output: Book/Report › Report › Professional

90 Downloads (Pure)

Abstract

We present Poseidon, a new anomaly based intrusion detection system. Poseidon is payload-based, and presents a two-tier architecture: the first stage consists of a Self-Organizing Map, while the second one is a modified PAYL system. Our benchmarks on the 1999 DARPA data set show a higher detection rate and lower number of false positives than PAYL and PHAD.

Original language	Undefined
Place of Publication	Enschede
Publisher	Centre for Telematics and Information Technology (CTIT)
Number of pages	11
Publication status	Published - Nov 2005

Publication series

Name	CTIT Technical Report Series
No.	05-53
ISSN (Print)	1381-3625

Keywords

IR-54544
EWI-720
METIS-228800
SCS-Cybersecurity

Access to Document

00000150Final published version, 690 KB

Cite this

@book{3d43e3b616124275b3d402c424091b6d,

title = "Poseidon: A 2-tier Anomaly-based Intrusion Detection System",

abstract = "We present Poseidon, a new anomaly based intrusion detection system. Poseidon is payload-based, and presents a two-tier architecture: the first stage consists of a Self-Organizing Map, while the second one is a modified PAYL system. Our benchmarks on the 1999 DARPA data set show a higher detection rate and lower number of false positives than PAYL and PHAD.",

keywords = "IR-54544, EWI-720, METIS-228800, SCS-Cybersecurity",

author = "D. Bolzoni and Emmanuele Zambon and Sandro Etalle and Hartel, \{Pieter H.\}",

year = "2005",

month = nov,

language = "Undefined",

series = "CTIT Technical Report Series",

publisher = "Centre for Telematics and Information Technology (CTIT)",

number = "05-53",

address = "Netherlands",

}

TY - BOOK

T1 - Poseidon

T2 - A 2-tier Anomaly-based Intrusion Detection System

AU - Bolzoni, D.

AU - Zambon, Emmanuele

AU - Etalle, Sandro

AU - Hartel, Pieter H.

PY - 2005/11

Y1 - 2005/11

N2 - We present Poseidon, a new anomaly based intrusion detection system. Poseidon is payload-based, and presents a two-tier architecture: the first stage consists of a Self-Organizing Map, while the second one is a modified PAYL system. Our benchmarks on the 1999 DARPA data set show a higher detection rate and lower number of false positives than PAYL and PHAD.

AB - We present Poseidon, a new anomaly based intrusion detection system. Poseidon is payload-based, and presents a two-tier architecture: the first stage consists of a Self-Organizing Map, while the second one is a modified PAYL system. Our benchmarks on the 1999 DARPA data set show a higher detection rate and lower number of false positives than PAYL and PHAD.

KW - IR-54544

KW - EWI-720

KW - METIS-228800

KW - SCS-Cybersecurity

M3 - Report

T3 - CTIT Technical Report Series

BT - Poseidon

PB - Centre for Telematics and Information Technology (CTIT)

CY - Enschede

ER -