2 search results - page 1 / 1 » Reasoning About Complementary Intrusion Evidence |
ACSAC
2004
IEEE
13 years 10 months ago
2004
IEEE
This paper presents techniques to integrate and reason about complementary intrusion evidence such as alerts generated by intrusion detection systems (IDSs) and reports by system ...
NSPW
2004
ACM
14 years 11 days ago
2004
ACM
We argue in favor of the explicit inclusion of suspicion as a concrete concept to be used in the analysis of audit data in order to guide the search for evidence of misuse. Our ap...