The New Jersey Institute of Technology's
Electronic Theses & Dissertations Project

Title:	An experimental study on network intrusion detection systems
Author:	Fu, Peng
View Online:	njit-etd2003-086 (ix, 33 pages ~ 3.2 MB pdf)
Department:	Department of Computer Science
Degree:	Master of Science
Program:	Computer Science
Document Type:	Thesis
Advisory Committee:	Wang, Jason T. L. (Committee chair) Liu, Chengjun (Committee member) Yin, Michael M. (Committee member)
Date:	2003-08
Keywords:	Computer networks Network intrusion detection Network traffic
Availability:	Unrestricted
Abstract:	A signature database is the key component of an elaborate intrusion detection system. The efficiency of signature generation for an intrusion detection system is a crucial requirement because of the rapid appearance of new attacks on the World Wide Web. However, in the commercial applications, signature generation is still a manual process, which requires professional skills and heavy human effort. Knowledge Discovery and Data Mining methods may be a solution to this problem. Data Mining and Machine Learning algorithms can be applied to the network traffic databases, in order to automatically generate signatures. The purpose of this thesis and the work related to it is to construct a feasible architecture for building a database of network traffic data. This database can then be used to generate signatures automatically. This goal is achieved using network traffic data captured on the data communication network at the New Jersey Institute of Technology (NJIT).