Novel attack detection using fuzzy logic and data mining

Intrusion Detection Systems are increasingly a key part of systems defense. Various approaches to Intrusion Detection are currently being used, but they are relatively ineffective. Artificial Intelligence plays a driving role in security services. This paper proposes a dynamic Intelligent Intrusion Detection System model, based on specific AI approach for intrusion detection. The technique that is being investigated includes fuzzy logic with network profiling, which uses simple data mining techniques to process the network data. The proposed hybrid system combines anomaly and misuse detection. Simple fuzzy rules, allow us to construct if-then rules that reflect common ways of describing security attacks. Suspicious intrusions can be traced back to its original source and any traffic from that particular source will be redirected back to them in future. Both network traffic and system audit data are used as inputs for the experimental needs.