86 search results - page 1 / 18 » Learning attack strategies from intrusion alerts |
CCS
2003
ACM
13 years 9 months ago
2003
ACM
Understanding the strategies of attacks is crucial for security applications such as computer and network forensics, intrusion response, and prevention of future attacks. This pap...
IJNSEC
2006
13 years 4 months ago
2006
Alert correlation is an important technique for managing large the volume of intrusion alerts that are raised by heterogenous Intrusion Detection Systems (IDSs). The recent trend ...
CORR
2008
Springer
13 years 4 months ago
2008
Springer
: Network intrusion detection systems are themselves becoming targets of attackers. Alert flood attacks may be used to conceal malicious activity by hiding it among a deluge of fa...
NDSS
2005
IEEE
13 years 10 months ago
2005
IEEE
Current intrusion detection systems point out suspicious states or events but do not show how the suspicious state or events relate to other states or events in the system. We sho...
AI
2008
Springer
13 years 11 months ago
2008
Springer
Alert correlation systems are post-processing modules that enable intrusion analysts to find important alerts and filter false positives efficiently from the output of Intrusion...