A copy of this work was available on the public web and has been preserved in the Wayback Machine. The capture dates from 2017; you can also visit the original URL.
The file type is
An application of machine learning to network intrusion detection
Proceedings 15th Annual Computer Security Applications Conference (ACSAC'99)
Differentiating anomalous network activity from normal network traffic is difficult and tedious. A human analyst must search through vast amounts of data to find anomalous sequences of network connections. To support the analyst's job, we built an application which enhances domain knowledge with machine learning techniques to create rules for an intrusion detection expert system. We employ genetic algorithms and decision trees to automatically generate rules for classifying network connections.doi:10.1109/csac.1999.816048 dblp:conf/acsac/SinclairPM99 fatcat:srcxk2rakrclvkqltqafy74sd4