67
Voted
CORR
2006
Springer
14 years 8 months ago
2006
Springer
We present APHRODITE, an architecture designed to reduce false positives in network intrusion-detection systems. APHRODITE works by detecting anomalies in the outgoing traffic, an...
85
Voted
LISA
2007
14 years 11 months ago
2007
We present an architecture1 designed for alert verification (i.e., to reduce false positives) in network intrusion-detection systems. Our technique is based on a systematic (and a...