Network Security White Papers
Enhancing Network Intrusion Detection With Integrated Sampling and Filtering
Overview The structure of many standalone Network Intrusion Detection Systems (NIDSs) centers around a chain of analysis that begins with packets captured by a packet filter, where the filter describes the protocols (TCP/UDP port numbers) and sometimes hosts or subnets to include or exclude from the analysis. This paper argues for augmenting such analysis with an additional, separately filtered stream of packets. This "Secondary Path" supplements the "Main Path" by integrating sampling and richer forms of filtering into a NIDS's analysis. It discusses an implementation of a secondary path for the Bro intrusion detection system and enhancements the authors developed to the Berkeley Packet Filter to work in concert with the secondary path.
| Publisher | University of California | File Format | |
|---|---|---|---|
| Date Published | July 2006 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 11 out of 23 users found this white paper useful
White Paper RSSBalancing Security Against Productivity
DownloadWhat makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...
Security: New strides in preventing intrusions.
Need help eliminating risk in your IT environment? This ForwardView webshow describes how security appliances, which incorporate an array of security functions, can help you ward off security breaches without...
MessageLabs Intelligence : 2009 security Predictions
Having analyzed the global threat landscape for almost a decade, MessageLabs Team Skeptic™ is comprised of many world-renowned malware and spam experts who have a global view of threats across...
IDC Vendor Spotlight
Organised ubiquity is a must for organisations to sucessfully "project" their users in any given landspace, at any given time, with secuirty policy. This White Paper covers issues surrounding secure...
Trend Micro Enterprise Security white paper
This white paper reviews the content security threat landscape and how it has evolved into a more dangerous and high risk environment. The paper discussed how conventional content security approaches...
