Incorporating soft computing techniques into a probabilistic intrusion detection system

Research output: Contribution to journalArticlepeer-review

86 Citations (Scopus)


There are a lot of industrial applications that can be solved competitively by hard computing, while still requiring the tolerance for imprecision and uncertainty that can be exploited by soft computing. This paper presents a novel intrusion detection system (IDS) that models normal behaviors with hidden Markov models (HMM) and attempts to detect intrusions by noting significant deviations from the models. Among several soft computing techniques neural network and fuzzy logic are incorporated into the system to achieve robustness and flexibility. Self-organizing map (SOM) determines the optimal measures of audit data and reduces them into appropriate size for efficient modeling by HMM. Based on several models with different measures, fuzzy logic makes the final decision of whether current behavior is abnormal or not. Experimental results with some real audit data show that the proposed fusion produces a viable intrusion detection system. Fuzzy rules that utilize the models based on the measures of system call, file access, and the combination of them produce more reliable performance.

Original languageEnglish
Pages (from-to)154-160
Number of pages7
JournalIEEE Transactions on Systems, Man and Cybernetics Part C: Applications and Reviews
Issue number2
Publication statusPublished - 2002 May

Bibliographical note

Funding Information:
Manuscript received April 8, 2001; revised May 6, 2002. This work was supported in part by the Ministry of Information and Communication of Korea. The author is with the Department of Computer Science, Yonsei University, Seoul 120-749, Korea (e-mail: Digital Object Identifier 10.1109/TSMCC.2002.801356.

All Science Journal Classification (ASJC) codes

  • Control and Systems Engineering
  • Software
  • Information Systems
  • Human-Computer Interaction
  • Computer Science Applications
  • Electrical and Electronic Engineering


Dive into the research topics of 'Incorporating soft computing techniques into a probabilistic intrusion detection system'. Together they form a unique fingerprint.

Cite this