MINDS (Minnesota Intrusion Detection System) Based on Data Mining Techniques

Abstract

In the past few years, computer attacks have been exponentially increasing, as well as their sophistication and severity. The intention of these attacks is not simply to infect a few machines, but to affect large portions of the Internet by shutting down millions of servers and clogging the information "superhighways." Intrusion detection corresponds to a suite of techniques that are used to identify such attacks against computers and network infrastructures.

This talk by Aleksandar Lezarevic, Senior Research Scientist at United Technologies Research Center, focused on behavior-based anomaly detection as a key element of the Minnesota Intrusion Detection System (MINDS). MINDS is a suite of data mining techniques that automatically detects, aggregates and summarizes attacks against computer networks and systems.