12 search results - page 1 / 3 » Data Reduction in Intrusion Alert Correlation |
CORR
2008
Springer
13 years 4 months ago
2008
Springer
: Network intrusion detection sensors are usually built around low level models of network traffic. This means that their output is of a similarly low level and as a consequence, ...
SP
2002
IEEE
13 years 4 months ago
2002
IEEE
This paper presents the work we have done within the MIRADOR project to design CRIM, a cooperative module for intrusion detection systems (IDS). This module implements functions t...
ACSAC
2005
IEEE
13 years 10 months ago
2005
IEEE
With the increasing security threats from infrastructure attacks such as worms and distributed denial of service attacks, it is clear that the cooperation among different organiza...
LISA
2007
13 years 6 months ago
2007
We present an architecture1 designed for alert verification (i.e., to reduce false positives) in network intrusion-detection systems. Our technique is based on a systematic (and a...
RAID
2001
Springer
13 years 9 months ago
2001
Springer
With the growing deployment of host and network intrusion detection systems, managing reports from these systems becomes critically important. We present a probabilistic approach t...