RAID
2004
Springer
14 years 5 months ago
2004
Springer
Abstract. Monitoring unused or dark IP addresses offers opportunities to significantly improve and expand knowledge of abuse activity without many of the problems associated with ...
RAID
2004
Springer
14 years 5 months ago
2004
Springer
We present a payload-based anomaly detector, we call PAYL, for intrusion detection. PAYL models the normal application payload of network traffic in a fully automatic, unsupervised...
RAID
2004
Springer
14 years 5 months ago
2004
Springer
Abstract. Attack analysis is a challenging problem, especially in emerging environments where there are few known attack cases. One such new environment is the Mobile Ad hoc Networ...
RAID
2004
Springer
14 years 5 months ago
2004
Springer
The detection of unknown viruses is beyond the capability of many existing virus detection approaches. In this paper, we show how proactive customization of system behaviors can be...
RAID
2004
Springer
14 years 5 months ago
2004
Springer
This paper provides an examination of an emerging class of security mechanisms often referred to as deception technologies or honeypots. It is based on our experience over the last...
RAID
2004
Springer
14 years 5 months ago
2004
Springer
We present a formal framework for the analysis of intrusion detection systems (IDS) that employ declarative rules for attack recognition, e.g. specification-based intrusion detect...
RAID
2004
Springer
14 years 5 months ago
2004
Springer
As the frequency of attacks faced by the average host connected to the Internet increases, reliance on manual intervention for response is decreasingly tenable. Operating system an...
RAID
2004
Springer
14 years 5 months ago
2004
Springer
Worm detection and response systems must act quickly to identify and quarantine scanning worms, as when left unchecked such worms have been able to infect the majority of vulnerabl...
RAID
2004
Springer
14 years 5 months ago
2004
Springer
Worm detection systems have traditionally used global strategies and focused on scan rates. The noise associated with this approach requires statistical techniques and large data s...
RAID
2004
Springer
14 years 5 months ago
2004
Springer
