Novel Evaluation Framework of Intrusion Detection Systems with Respect to Security Policies

Intrusion Detection System is an integral component of the computer security infrastructure. It is usually put in place to detect computer security policy violations. While its role is important, its effectiveness is not easily measurable. This paper proposes a framework for assessing how well a rule-based Intrusion Detection System is performing its intended task.

• Type: Conference
• Year: 2006
• Where: DMIN
• Authors: Negmat Mullodzhanov
• Keywords: DMIN 2006, DMIN 2007, Intrusion Detection System, Rule-based Intrusion Detection, Security Policy Violations