10 search results - page 1 / 2 » Measuring normality in HTTP traffic for anomaly-based intrus... |
CN
2004
13 years 5 months ago
2004
In this paper, the problem of measuring normality in HTTP traffic for the purpose of anomaly-based network intrusion detection is addressed. The work carried out is expressed in t...
IWIA
2003
IEEE
13 years 10 months ago
2003
IEEE
1 A new method for detecting anomalies in the usage of protocols in computer networks is presented in this work. The proposed methodology is applied to TCP and disposed in two step...
DIMVA
2010
13 years 3 months ago
2010
Since most current network attacks happen at the application layer, analysis of packet payload is necessary for their detection. Unfortunately malicious packets may be crafted to m...
JMLR
2010
13 years 1 days ago
2010
Zero-days attacks are one of the most dangerous threats against computer networks. These, by definition, are attacks never seen before. Thus, defense tools based on a database of ...
ACSAC
2004
IEEE
13 years 9 months ago
2004
IEEE
Combining an "anomaly" and a "misuse" IDSes offers the advantage of separating the monitored events between normal, intrusive or unqualified classes (ie not kn...