A user-centric intrusion detection system by using ontology approach

Abstract

In the security infrastructure, intrusion detection has become an indispensable defense line in face of increasing vulnerabilities exposed in today's computing systems and Internet. In this paper, our approach uses ontologies as a way of grasping the knowledge of a domain, expressing the intrusion detection system much more in terms of the end users domain, generating the intrusion detection more easily and performing intelligent reasoning. Experimental results show that our anomaly detection techniques are very promising and are successful in automatically detecting intrusions at very low false alarm rate compared with several important traditional classification techniques.