System and methods for anomaly detection and adaptive learning

Details System and methods for anomaly detection and adaptive learning System and methods for anomaly detection and adaptive learning

2008-09-09

2008-09-09

Moise, Emmanuel L (Department: 2137)

Electrical computers and digital processing systems: support

Computer virus detection by cryptography

C726S022000, C726S023000

Reexamination Certificate

active

10269694

ABSTRACT:
In a method of generating an anomaly detection model for classifying activities of a computer system, using a training set of data corresponding to activity on the computer system, the training set comprising a plurality of instances of data having features, and wherein each feature in said plurality of features has a plurality of values. For a selected feature and a selected value of the selected feature, a quantity is determined which corresponds to the relative sparsity of such value. The quantity may correspond to the difference between the number occurrences of the selected value and the number of occurrences of the most frequently occurring value. These instances are classified as anomaly and added to the training set of normal data to generate a rule set or other detection model.

REFERENCES:
patent: 6405318 (2002-06-01), Rowland
patent: 6597777 (2003-07-01), Ho
patent: 6735703 (2004-05-01), Kilpatrick et al.
patent: 7162741 (2007-01-01), Eskin et al.
patent: 2003/0172167 (2003-09-01), Judge et al.
patent: WO 2007006994 (2007-01-01), None
Yongguang Zhang, Wenke Lee, Yi-An Huang, “Intrusion Detection Techniques for Mobile Wireless Networks”, Sep. 2003, Wireless Networks, vol. 9, Issue 5, pp. 545-556.
Forrest et al., “A Sense of Self for UNIX Processes,”Proceedings of IEEE Symposium on Security and Privacy, (1996) 120-128.
Anderson et al., “Next-generation Intrusion Detection Expert Systems (NIDES): A Summary,”Technical ReportSRI-CSL-95-07,Computer Science Laboratory(1995).
Lippman et al., MIT Lincoln Laboratory “1998 Intrusion Detection Evaluation” (1998).
Cohen, :Fast Effective Rule Induction,Proceedings of Machine Learning: Proceedings of Twelfth International Conference, (1995).
Lee,A Data Mining Framework for Constructing Features and Models for Intrusion Detection Systems, Ph.D. Thesis, Columbia University, (1999).

Affiliated with

Also associated with

Rating

System and methods for anomaly detection and adaptive learning does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with System and methods for anomaly detection and adaptive learning, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and System and methods for anomaly detection and adaptive learning will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3912111