Matches in SemOpenAlex for { <https://semopenalex.org/work/W2149278843> ?p ?o ?g. }
- W2149278843 endingPage "566" @default.
- W2149278843 startingPage "557" @default.
- W2149278843 abstract "Intrusions into computer systems have caused many quality/reliability problems. Detecting intrusions is an important part of assuring the quality/reliability of computer systems by quickly detecting intrusions and associated quality/reliability problems in order to take corrective actions. In this paper, we present and compare two methods of forecasting normal activities in computer systems for intrusion detection. One forecasting method uses the average of long-term normal activities as the forecast. Another forecasting method uses the EWMA (exponentially weighted moving average) one-step-ahead forecast. We use a Markov chain model to learn and predict normal activities used in the EWMA forecasting method. A forecast of normal activities is used to detect a large deviation of the observed activities from the forecast as a possible intrusion into computer systems. A Chi square distance metric is used to measure the deviation of the observed activities from the forecast of normal activities. The two forecasting methods are tested on computer audit data of normal and intrusive activities for intrusion detection. The results indicate that the Chi square distance measure with the EWMA forecasting provides better performance in intrusion detection than that with the average-based forecasting method." @default.
- W2149278843 created "2016-06-24" @default.
- W2149278843 creator A5014160766 @default.
- W2149278843 creator A5020246147 @default.
- W2149278843 creator A5073212256 @default.
- W2149278843 date "2004-12-01" @default.
- W2149278843 modified "2023-09-24" @default.
- W2149278843 title "EWMA Forecast of Normal System Activity for Computer Intrusion Detection" @default.
- W2149278843 cites W1497249636 @default.
- W2149278843 cites W1509210027 @default.
- W2149278843 cites W1585261948 @default.
- W2149278843 cites W1647135810 @default.
- W2149278843 cites W1838783946 @default.
- W2149278843 cites W1854288931 @default.
- W2149278843 cites W1952056635 @default.
- W2149278843 cites W1952434180 @default.
- W2149278843 cites W1967581691 @default.
- W2149278843 cites W1972062587 @default.
- W2149278843 cites W1994212840 @default.
- W2149278843 cites W2011604665 @default.
- W2149278843 cites W2012568697 @default.
- W2149278843 cites W2034065435 @default.
- W2149278843 cites W2069025560 @default.
- W2149278843 cites W2078436544 @default.
- W2149278843 cites W2083568754 @default.
- W2149278843 cites W2102291758 @default.
- W2149278843 cites W2106442760 @default.
- W2149278843 cites W2107035663 @default.
- W2149278843 cites W2126345423 @default.
- W2149278843 cites W2129860818 @default.
- W2149278843 cites W2130523241 @default.
- W2149278843 cites W2131970275 @default.
- W2149278843 cites W2132625653 @default.
- W2149278843 cites W2134070140 @default.
- W2149278843 cites W2150847526 @default.
- W2149278843 cites W2166431113 @default.
- W2149278843 cites W2166804592 @default.
- W2149278843 cites W2338717024 @default.
- W2149278843 doi "https://doi.org/10.1109/tr.2004.837705" @default.
- W2149278843 hasPublicationYear "2004" @default.
- W2149278843 type Work @default.
- W2149278843 sameAs 2149278843 @default.
- W2149278843 citedByCount "54" @default.
- W2149278843 countsByYear W21492788432012 @default.
- W2149278843 countsByYear W21492788432013 @default.
- W2149278843 countsByYear W21492788432014 @default.
- W2149278843 countsByYear W21492788432015 @default.
- W2149278843 countsByYear W21492788432016 @default.
- W2149278843 countsByYear W21492788432020 @default.
- W2149278843 countsByYear W21492788432021 @default.
- W2149278843 countsByYear W21492788432022 @default.
- W2149278843 countsByYear W21492788432023 @default.
- W2149278843 crossrefType "journal-article" @default.
- W2149278843 hasAuthorship W2149278843A5014160766 @default.
- W2149278843 hasAuthorship W2149278843A5020246147 @default.
- W2149278843 hasAuthorship W2149278843A5073212256 @default.
- W2149278843 hasConcept C105795698 @default.
- W2149278843 hasConcept C111919701 @default.
- W2149278843 hasConcept C119857082 @default.
- W2149278843 hasConcept C121332964 @default.
- W2149278843 hasConcept C124101348 @default.
- W2149278843 hasConcept C127413603 @default.
- W2149278843 hasConcept C159886148 @default.
- W2149278843 hasConcept C163258240 @default.
- W2149278843 hasConcept C196985124 @default.
- W2149278843 hasConcept C200601418 @default.
- W2149278843 hasConcept C2780009758 @default.
- W2149278843 hasConcept C33923547 @default.
- W2149278843 hasConcept C35525427 @default.
- W2149278843 hasConcept C41008148 @default.
- W2149278843 hasConcept C43214815 @default.
- W2149278843 hasConcept C62520636 @default.
- W2149278843 hasConcept C74746147 @default.
- W2149278843 hasConcept C98045186 @default.
- W2149278843 hasConcept C98763669 @default.
- W2149278843 hasConceptScore W2149278843C105795698 @default.
- W2149278843 hasConceptScore W2149278843C111919701 @default.
- W2149278843 hasConceptScore W2149278843C119857082 @default.
- W2149278843 hasConceptScore W2149278843C121332964 @default.
- W2149278843 hasConceptScore W2149278843C124101348 @default.
- W2149278843 hasConceptScore W2149278843C127413603 @default.
- W2149278843 hasConceptScore W2149278843C159886148 @default.
- W2149278843 hasConceptScore W2149278843C163258240 @default.
- W2149278843 hasConceptScore W2149278843C196985124 @default.
- W2149278843 hasConceptScore W2149278843C200601418 @default.
- W2149278843 hasConceptScore W2149278843C2780009758 @default.
- W2149278843 hasConceptScore W2149278843C33923547 @default.
- W2149278843 hasConceptScore W2149278843C35525427 @default.
- W2149278843 hasConceptScore W2149278843C41008148 @default.
- W2149278843 hasConceptScore W2149278843C43214815 @default.
- W2149278843 hasConceptScore W2149278843C62520636 @default.
- W2149278843 hasConceptScore W2149278843C74746147 @default.
- W2149278843 hasConceptScore W2149278843C98045186 @default.
- W2149278843 hasConceptScore W2149278843C98763669 @default.
- W2149278843 hasIssue "4" @default.
- W2149278843 hasLocation W21492788431 @default.
- W2149278843 hasOpenAccess W2149278843 @default.
- W2149278843 hasPrimaryLocation W21492788431 @default.