877 search results - page 2 / 176 » Intrusion detection systems as evidence |
NSPW
2004
ACM
14 years 4 months ago
2004
ACM
We argue in favor of the explicit inclusion of suspicion as a concrete concept to be used in the analysis of audit data in order to guide the search for evidence of misuse. Our ap...
ACMSE
2005
ACM
14 years 4 months ago
2005
ACM
Accurate identification of misuse is a key factor in determining appropriate ways to protect systems. Modern intrusion detection systems often use alerts from different sources su...
JCS
1998
13 years 10 months ago
1998
A method is introducted for detecting intrusions at the level of privileged processes. Evidence is given that short sequences of system calls executed by running processes are a g...
FPL
2003
Springer
14 years 4 months ago
2003
Springer
Intrusion Detection Systems such as Snort scan incoming packets for evidence of security threats. The most computation-intensive part of these systems is a text search against hund...
ACMSE
2004
ACM
14 years 4 months ago
2004
ACM
Traditional intrusion detection systems have a central coordinator with a static hierarchical architecture. We propose a peer-to-peer intrusion detection system that has no centra...