Recent Advances in Intrusion Detection

5th International Symposium, RAID 2002, Zurich, Switzerland, October 16-18, 2002, Proceedings

AvAndreas Wespi,Giovanni Vigna

Häftad, Engelska, 2002

Del i serien Lecture Notes in Computer Science

534 kr

Beställningsvara. Skickas inom 10-15 vardagar. Fri frakt över 249 kr.

Beskrivning

This book constitutes the refereed proceedings of the 5th International Symposium on Recent Advances in Intrusion Detection, RAID 2002, held in Zurich, Switzerland, in October 2002. The 16 revised full papers presented were carefully reviewed and selected from a total of 81 submissions. The papers are organized in topical sections on stepping stone detection, anomality detection, correlation, legal aspects and intrusion tolerance, assessment of intrusion detection systems, adaptive intrusion detection systems, intrusion detection analysis.

Produktinformation

Utgivningsdatum:2002-10-02
Mått:155 x 233 x 19 mm
Vikt:522 g
Format:Häftad
Språk:Engelska
Serie:Lecture Notes in Computer Science
Antal sidor:327
Upplaga:2002
Förlag:Springer-Verlag Berlin and Heidelberg GmbH & Co. KG
ISBN:9783540000204

Utforska kategorier

Byggnadsteknik inom Naturvetenskap och teknik

Innehållsförteckning

Stepping Stone Detection.- Detecting Long Connection Chains of Interactive Terminal Sessions.- Multiscale Stepping-Stone Detection: Detecting Pairs of Jittered Interactive Streams by Exploiting Maximum Tolerable Delay.- Detecting Malicious Software by Monitoring Anomalous Windows Registry Accesses.- Anomaly Detection.- Undermining an Anomaly-Based Intrusion Detection System Using Common Exploits.- Correlation.- Analyzing Intensive Intrusion Alerts via Correlation.- A Mission-Impact-Based Approach to INFOSEC Alarm Correlation.- M2D2: A Formal Data Model for IDS Alert Correlation.- Legal Aspects / Intrusion Tolerance.- Development of a Legal Framework for Intrusion Detection.- Learning Unknown Attacks — A Start.- Assessment of Intrusion Detection Systems.- Evaluation of the Diagnostic Capabilities of Commercial Intrusion Detection Systems.- A Stochastic Model for Intrusions.- Attacks against Computer Network: Formal Grammar-Based Framework and Simulation Tool.- Capacity Verification for High Speed Network Intrusion Detection Systems.- Adaptive Intrusion Detection Systems.- Performance Adaptation in Real-Time Intrusion Detection Systems.- Intrusion Detection Analysis.- Accurate Buffer Overflow Detection via Abstract Pay load Execution.- Introducing Reference Flow Control for Detecting Intrusion Symptoms at the OS Level.- The Effect of Identifying Vulnerabilities and Patching Software on the Utility of Network Intrusion Detection.