877 search results - page 2 / 176 » Intrusion detection systems as evidence |
NSPW
2004
ACM
13 years 10 months ago
2004
ACM
We argue in favor of the explicit inclusion of suspicion as a concrete concept to be used in the analysis of audit data in order to guide the search for evidence of misuse. Our ap...
ACMSE
2005
ACM
13 years 10 months ago
2005
ACM
Accurate identification of misuse is a key factor in determining appropriate ways to protect systems. Modern intrusion detection systems often use alerts from different sources su...
JCS
1998
13 years 4 months ago
1998
A method is introducted for detecting intrusions at the level of privileged processes. Evidence is given that short sequences of system calls executed by running processes are a g...
FPL
2003
Springer
13 years 10 months ago
2003
Springer
Intrusion Detection Systems such as Snort scan incoming packets for evidence of security threats. The most computation-intensive part of these systems is a text search against hund...
ACMSE
2004
ACM
13 years 10 months ago
2004
ACM
Traditional intrusion detection systems have a central coordinator with a static hierarchical architecture. We propose a peer-to-peer intrusion detection system that has no centra...