Network Security White Papers
Designing and Implementing a Family of Intrusion Detection Systems
Overview Intrusion detection systems are distributed applications that analyze the events in a networked system to identify malicious behavior. The analysis is performed using a number of attack models (or signatures) that are matched against a specific event stream. Intrusion detection systems may operate in heterogeneous environments, analyzing different types of event streams. Currently, intrusion detection systems and the corresponding attack modeling languages are developed following an ad hoc approach to match the characteristics of specific target environments. As the number of systems that have to be protected increases, this approach results in increased development e ort. To overcome this limitation, a developed framework is developed, called STAT that supports the development of new intrusion detection functionality in a modular fashion.
| Publisher | Association for Computing Machinery | File Format | |
|---|---|---|---|
| Date Published | September 2003 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 2 out of 5 users found this white paper useful
White Paper RSS
Download
Register
