<?xml version="1.0"?>

<!DOCTYPE owl [
  <!ENTITY rdf "http://www.w3.org/1999/02/22-rdf-syntax-ns#">
  <!ENTITY rdfs "http://www.w3.org/2000/01/rdf-schema#">
  <!ENTITY xsd "http://www.w3.org/2001/XMLSchema#">
  <!ENTITY owl "http://www.w3.org/2002/07/owl#">
  <!ENTITY cc "http://web.resource.org/cc/#">
  <!ENTITY project "http://ebiquity.umbc.edu/ontology/project.owl#">
  <!ENTITY person "http://ebiquity.umbc.edu/ontology/person.owl#">
  <!ENTITY pub "http://ebiquity.umbc.edu/ontology/publication.owl#">
  <!ENTITY assert "http://ebiquity.umbc.edu/ontology/assertion.owl#">]>

<!--
  This ontology document is licensed under the Creative Commons
  Attribution License. To view a copy of this license, visit
  http://creativecommons.org/licenses/by/2.0/ or send a letter to
  Creative Commons, 559 Nathan Abbott Way, Stanford, California
  94305, USA.
-->

<rdf:RDF 
  xmlns:rdf = "&rdf;"
  xmlns:rdfs = "&rdfs;"
  xmlns:xsd = "&xsd;"
  xmlns:owl = "&owl;"
  xmlns:cc = "&cc;"
  xmlns:project = "&project;"
  xmlns:person = "&person;"
  xmlns:pub = "&pub;"
  xmlns:assert = "&assert;">
  <pub:InProceedings rdf:about="http://ebiquity.umbc.edu/paper/html/id/67/Fuzzy-Clustering-for-Intrusion-Detection">
    <rdfs:label><![CDATA[Fuzzy Clustering for Intrusion Detection]]></rdfs:label>
    <pub:title><![CDATA[Fuzzy Clustering for Intrusion Detection]]></pub:title>
    <pub:publishedOn rdf:datatype="&xsd;dateTime">2003-04-30T00:00:00-05:00</pub:publishedOn>
    <pub:abstract><![CDATA[The newly formed Department of Homeland Security has been mandated to reduce America's vulnerability to terrorism. In addition to being charged with physical protection, this newly formed department is also responsible for protecting the nation's critical infrastructure. Protecting computer systems from intrusions is an important aspect of securing the nation's infrastructure. We are exploring how fuzzy data mining and concepts introduced by the semantic Web can operate in synergy to perform distributed intrusion detection. The underlying premise of our intrusion detection model is to describe attacks as instances of an ontology using a semantically rich language, reason over them and subsequently classify them as instances of an attack of a specific type. However, before an abnormality can be specified as an instance of the ontology, it first needs to be detected. Hence, our intrusion detection model is two phased, where the first phase uses data mining techniques to analyze low level data streams that capture process, system and network states and to detect anomalous behavior. The second phase reasons over instances of anomalous behavior specified according to our ontology. This paper focuses on the initial phase of our model: outlier detection within low level data streams. Accordingly, we present the preliminary results of the use of fuzzy clustering to detect anomalies within low level kernel data streams.]]></pub:abstract>
    <pub:pages><![CDATA[1274 - 1278]]></pub:pages>
    <pub:tag><![CDATA[intrusion detection]]></pub:tag>
    <pub:tag><![CDATA[security]]></pub:tag>
    <pub:tag><![CDATA[uncertainty]]></pub:tag>
    <pub:booktitle><![CDATA[Proceedings of the 12th IEEE International Conference on Fuzzy Systems]]></pub:booktitle>
    <pub:author>
       <rdf:List>
         <rdf:first><person:Alumnus rdf:about="http://ebiquity.umbc.edu/person/html/Jeffrey/L/Undercoffer/"><person:name><![CDATA[Jeffrey L Undercoffer]]></person:name><rdfs:label><![CDATA[Jeffrey L Undercoffer]]></rdfs:label></person:Alumnus></rdf:first>
         <rdf:rest>
           <rdf:List>
             <rdf:first><person:PrincipalFaculty rdf:about="http://ebiquity.umbc.edu/person/html/Anupam/Joshi/"><person:name><![CDATA[Anupam  Joshi]]></person:name><rdfs:label><![CDATA[Anupam  Joshi]]></rdfs:label></person:PrincipalFaculty></rdf:first>
             <rdf:rest>
               <rdf:List>
                 <rdf:first><person:Collaborator rdf:about="http://ebiquity.umbc.edu/person/html/H./Shah/"><person:name><![CDATA[H.  Shah]]></person:name><rdfs:label><![CDATA[H.  Shah]]></rdfs:label></person:Collaborator></rdf:first>
                 <rdf:rest rdf:resource="&rdf;nil" />
               </rdf:List>
             </rdf:rest>
           </rdf:List>
         </rdf:rest>
       </rdf:List>
    </pub:author>
    <pub:firstAuthor><person:Alumnus rdf:about="http://ebiquity.umbc.edu/person/html/Jeffrey/L/Undercoffer/"><person:name><![CDATA[Jeffrey L Undercoffer]]></person:name><rdfs:label><![CDATA[Jeffrey L Undercoffer]]></rdfs:label></person:Alumnus></pub:firstAuthor>
    <pub:relatedProject><project:PastProject rdf:about="http://ebiquity.umbc.edu/project/html/id/33/Intrusion-Detection"><project:title><![CDATA[Intrusion Detection]]></project:title><rdfs:label><![CDATA[Intrusion Detection]]></rdfs:label></project:PastProject></pub:relatedProject>
  </pub:InProceedings>

  <rdf:Description rdf:about="">
    <cc:License rdf:resource="http://creativecommons.org/licenses/by/2.0/" />
  </rdf:Description>

</rdf:RDF>
