12 search results - page 1 / 3 » Systematic Signature Engineering by Re-use of Snort Signatur... |
ACSAC
2008
IEEE
13 years 11 months ago
2008
IEEE
Most intrusion detection systems apply the misuse detection approach. Misuse detection compares recorded audit data with predefined patterns denoted as signatures. A signature is ...
ETRICS
2006
13 years 8 months ago
2006
Abstract. Most intrusion detection systems deployed today apply misuse detection as detection procedure. Misuse detection compares the recorded audit data with predefined patterns,...
EPIA
2003
Springer
13 years 10 months ago
2003
Springer
We describe how to build a network intrusion detection sensor by slightly modifying NASA’s CLIPS source code introducing some new features. An overview of the system is presente...
ISPASS
2008
IEEE
13 years 11 months ago
2008
IEEE
This paper presents and experimentally evaluates two parallelization strategies for the popular open-source Snort network intrusion detection system (NIDS). Snort identifies intr...
CCS
2003
ACM
13 years 10 months ago
2003
ACM
Many network intrusion detection systems (NIDS) use byte sequences as signatures to detect malicious activity. While being highly efficient, they tend to suffer from a high false...