Process Engineering Approach to the Development and Integration of Intrusion Detection Techniques

摘要

The objectives of this project are to: (1) establish an integration infrastructure for intrusion detection, based on a process engineering approach; (2) investigate system-level intrusion detection techniques for the fusion and correlation of local information about intrusions, based on the integration infrastructure for intrusion detection; and (3) develop an integrated intrusion detection system as a concept technological demonstration of the integration infrastructure and system-level intrusion detection techniques. In this final project report, we present the architecture of an integrated intrusion detection system based on the process engineering approach, as well as various intrusion detection techniques that are employed in this integrated intrusion detection system. The testing results of these intrusion detection techniques are also illustrated to demonstrate their intrusion detection performance. Various attributes of system activity data for intrusion detection are tested and compared.