%0 Conference Proceedings
%T A Multi-agents Intrusion Detection System Using Ontology and Clustering Techniques
%+ Université de Tunis
%+ Services répartis, Architectures, MOdélisation, Validation, Administration des Réseaux (SAMOVAR)
%+ Centre National de la Recherche Scientifique (CNRS)
%A Brahmi, Imen
%A Brahmi, Hanen
%A Yahia, Sadok, Ben
%Z Part 11: Security and Network Technologies: Security
%< avec comité de lecture
%( IFIP Advances in Information and Communication Technology
%B 5th International Conference on Computer Science and Its Applications (CIIA)
%C Saida, Algeria
%Y Abdelmalek Amine
%Y Ladjel Bellatreche
%Y Zakaria Elberrichi
%Y Erich J. Neuhold
%Y Robert Wrembel
%I Springer International Publishing
%3 Computer Science and Its Applications
%V AICT-456
%P 381-393
%8 2015-05-20
%D 2015
%R 10.1007/978-3-319-19578-0_31
%K Intrusion detection system
%K Multi-agents
%K Clustering
%K Ontology
%Z Computer Science [cs]Conference papers
%X Nowadays, the increase in technology has brought more sophisticated intrusions. Consequently, Intrusion Detection Systems (IDS) are quickly becoming a popular requirement in building a network security infrastructure. Most existing IDS are generally centralized and suffer from a number of drawbacks, e.g., high rates of false positives, low efficiency, etc, especially when they face distributed attacks. This paper introduces a novel hybrid multi-agents IDS based on the intelligent combination of a clustering technique and an ontology model, called OCMAS-IDS. The latter integrates the desirable features provided by the multi-agents methodology with the benefits of semantic relations as well as the high accuracy of the data mining technique. Carried out experiments showed the efficiency of our distributed IDS, that sharply outperforms other systems over real traffic and a set of simulated attacks.
%G English
%Z TC 5
%2 https://inria.hal.science/hal-01789978/document
%2 https://inria.hal.science/hal-01789978/file/339159_1_En_31_Chapter.pdf
%L hal-01789978
%U https://inria.hal.science/hal-01789978
%~ INSTITUT-TELECOM
%~ CNRS
%~ TELECOM-SUDPARIS
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-AICT
%~ IFIP-TC
%~ IFIP-TC5
%~ IFIP-AICT-456
%~ IFIP-CIIA
%~ INSTITUTS-TELECOM