A New Off-Line Intrusion Detection System
M. Daoudi, A. Boukra
Journal of Information Security Research, Vol. 4, No. 2, 2013.
DOI: 
Link: http://www.dline.info/jisr/fulltext/v4n2/1.pdf
Abstract:
The problem of intrusion detection is studied extensively in computer security. The development of security mechanisms, like Intrusion Detection Systems, is of great importance in order to preserve the confidentiality, integrity and availability of data stored in computers. Off-line intrusion detection can be accomplished by searching audit trail logs of user activities for matches to patterns of events required for known attacks. This is a combinatorial optimization problem, the NPcomplete. Metaheuristics offer an alternative to solve this type of problems as databases of events and attacks grow. This paper presents an approach using an evolutionary algorithm, Harmony Search metaheuristic, to detect intrusions. Experiments are performed to show its effectiveness to detect the unseen intrusion attacks with high detection rate and recognize normal network traffic with low false alarm rate. Furthermore, comparisons with a â€œBiogeographyâ€ inspired intrusion detection approach are made. The results confirm the good behavior of our new approach.