A Biogeography Inspired Approach for Security Audit Trail Analysis
M. Daoudi, A. Boukra, M. Ahmed-Nacer
Journal of Intelligent Computing, Vol. 2, No. 4, 2011.
DOI: 
Link: http://www.dline.info/jic/fulltext/v2n4/1.pdf
Abstract:
The study of effective methods for intrusion detection in audit trail logs is an important part of the vast effort to improve Intrusion Detection Systems that constitute one of the primary approach in the problem of computer security. Different methods have been proposed including: Neural Networks, Immune Systems, and Genetic Algorithms. Security Audit trail Analysis can be accomplished by searching audit trail logs of user activities for known attacks. The later problem is NPComplete. Metaheuristics offer an alternative to solve this type of problem. In this paper, we propose to use Biogeography Based Optimization algorithm (BBO) as analysis engine. BBO is a population-based evolutionary algorithm well suited for constrained optimization problems. Experimental results for simulated attacks are reported. The effectiveness of the approach is evaluated by its ability to make correct predictions. It has proven effective and capable of producing a reliable method for intrusion detection.