You are here: silicon.com > Resources > White Papers > Security > Security Administration > Security Tools

Security Tools White Papers

Dependency-Based Distributed Intrusion Detection

Tags:
security tools

Overview Distributed network intrusion detection has attracted much attention recently. The main focus in this work is on zero-day, slow-scanning worms, of which no existing signatures are available. End hosts are organized into regions based on network knowledge, which it posits is positively correlated to the dependency structure. Leveraging on this organization, different intrusion detection techniques are applied within and across regions. A Hidden Markov Model (HMM) is used within a region to capture the dependency among hosts, and use Sequential Hypothesis Testing (SHT) globally to take advantage of the independence between regions.

Further White Paper Details
Publisher	Massachusetts Institute of Technology	File Format	PDF
Date Published	December 2007
Format	White Papers
Topics	Security Tools, Intrusion Detection Systems

Did you find this white paper useful? 4 out of 10 users found this white paper useful

Take a holistic approach to business-driven security

Publisher:
IBM

Balancing Security Against Productivity

Publisher:
Novell

Security: New strides in preventing intrusions.

Publisher:
IBM

Novell Zenworks Endpoint Security Management: Total Control from a Single Console

Publisher:
Novell

Secure Desktop On-Demand Webcast

Publisher:
Novell

Small businesses get top security tips

Do not open any unexpected email attachments without first saving to disk and scanning for viruses. Use an intrusion detection system, setting an alarm to instantly notify key managers when a breach is detected.

Channel:
SME Director

Anti-virus vendors failing users, claims CA chief

Anti-virus vendors are not doing enough to protect their customers from malicious worms and viruses, according to software giant Computer Associates (CA). To prevent this type of malware from attacking, companies should have both intrusion...

Channel:
Security Strategy

Symantec streamlines network security

Corporate clients have been looking for ways to reduce the amount of time system administrators need to patch computers and respond to new viruses and worms. Standalone network-protection products, such as intrusion-detection systems and firewalls...

Channel:
Security Strategy

Companies urged to patch Sendmail

The only dependency is that the domain needs to accept email," Ingevaldson said. Because the vulnerability is contained in an email message, it will bypass firewalls and many intrusion detection systems, said Dan Ingsvaldson, team leader for ISS's...

2003 sees hackers rise to the task, says NAI chief

However, the problem now is that with detection it's all very well detecting something but, with the speed of attack being talked about with these Warhol worms, the damage is done "before you've even got out of bed an pulled your pants on...

Firewall sales to skyrocket, say analysts

Digitally cordoning off networks has proved to be an effective way to prevent some attacks, such as worms, from spreading. Such a product would bring together many functions, such as virus protection, intrusion detection, virtual private networking...

Channel:
Security Strategy

Live Webcast: Telecoms 2.0 - Where is telecoms heading?

In this webcast, our panel of experts will review where we are with next generation telecoms in the UK, working through the concept of 'Telecoms 2.0': - Realising the potential of Next Generation Networks - why it isn't just about the technology? - What attributes should firms be looking for in their telco partner? - Is the relationship between telco provider and customer changing? - What things need to happen to make next generation services a reality? - You say you want the supplier to change. Do you want to change too? - What is Telecoms 2.0?

Publisher:
ZDNet UK

Telecom 2.0: Mind over matter

ntl:Telewest Business believes that the role of the telco is evolving. Gone are the days when it was enough to simply focus on circuits and minutes, customers now need a far higher degree of interaction and look for suppliers who will talk business solutions with them.

Publisher:
ntl:Telewest Business

IBM Information Server Change Data Capture

In today's fast-paced world, access to real-time data has never been more important. To be successful, organizations need to be able to report and analyze corporate data quickly and easily, regardless of what applications created the data, what platform they're running on, or what database they're stored in.

Publisher:
IBM

An examination of server consolidation: the trends that can drive efficiencies and help businesses gain a competitive edge

This white paper provides a starting point for organizations contemplating server consolidation. It includes an overview of server consolidation concepts and techniques and provides guidance on methodologies. It also looks at the potential cost savings associated with server consolidation and offers information on how organizations can sustain the advantage they have gained by consolidating their servers.

Publisher:
IBM

Also on silicon.com

Site Navigation:

Security Tools White Papers

Dependency-Based Distributed Intrusion Detection

Quick Sitemap Links:

About Us

Search

Blogs

Verticals

Advertising Features

CNET Networks in Europe

CNET Networks in the United States

CNET Networks in Asia Pacific