Machine learning and data mining for computer security: methods and applications

"Machine Learning and Data Mining for Computer Security" provides an overviewof the current state of research in machine learning and data mining as it applies to problems in computer security. This book has a strong focus on information processing and combines and extends results from computer security. The first part of the book surveys the data sources, the learning and mining methods, evaluation methodologies, and past work relevant for computer security. The second part of the book consists of articles written by the top researchers working in this area. These articles deals with topics of host-based intrusiondetection through the analysis of audit trails, of command sequences and of system calls as well as network intrusion detection through the analysis of TCPpackets and the detection of malicious executables.This book fills the great need for a book that collects and frames work on developing and applying methods from machine learning and data mining to problems in computer security. INDICE: Introduction.- Some Basic Concepts of Machine Learning and Data Mining.- Learning to Detect Malicious Executables.- Data Mining Applied to Intrusion Detection: MITRE Experiences.- Intrusion Detection Alarm Clustering.- Behavioural Features for Network Anomaly Detection.- Cost-sensitive Modeling for Intrusion Detection.- Data Cleaning and Enriched Representations for Anomaly Detection in System Calls.- A Decision-Theoretic, Semi-supervised Model for Intrusion Detection.

• ISBN: 978-1-84996-544-6
• Editorial: Springer
• Encuadernacion: Rústica
• Fecha Publicación: 31/03/2012
• Nº Volúmenes: 1
• Idioma: Inglés