Keynote - 2: Dynamic Interpolative Modelling and its Application to Intrusion Detection by Prof. Qiang Shen

摘要

Intrusion detection systems (IDSs) are considered as a popular and effective security tool for generating alerts to network administrators, in order to inform possible or existing threats. A standard IDS may not be very effective or even unsuitable for an organisational requirements over a sustained period. This talk will present an application of D-FRI for building an effective IDS. In particular, it will introduce an intelligent IDS that is built upon the most popular open source IDS, Snort via integration with D-FRI. The talk will illustrate the results that the integration of D-FRI with Snort provides an additional level of intelligence in predicting possible threats. This integration also facilitates dynamic modelling, in terms of a dynamic fuzzy rule base, by promoting new rules based on the current network traffic conditions, helping Snort to reduce both false positives and false negatives.