An evaluation technique for network intrusion detection systems

ACM International Conference Proceeding Series

Volumn 152, Issue , 2006, Pages

  Zhang, Dana ^a   Leckie, Christopher ^a  

^a UNIVERSITY OF MELBOURNE   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; HEURISTIC METHODS; NETWORK ARCHITECTURE; SYSTEMS ANALYSIS;

CONCISE MEASUREMENT; FALSE POSITIVE RATE; SCAN DETECTION ALGORITHMS;

INTRUSION DETECTION;

EID: 34547326623     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1146847.1146870     Document Type: Conference Paper

References (15)

1. J. Green, D. Marchette, S. Northcutt and Bill Ralph. Analysis Techniques for Detecting Coordinated Attacks and Probes. In Proceedings of USENIX Workshop on Intrusion Detection and Network Monitoring, pages 12-20, Santa Clara, California, USA, April 1999.
2. L. Heberlein, G. Dias, K. Levitt, B. Mukherjee, J. Wood and D. Wolber. A Network Security Monitor. In Proceedings of the IEEE Symposium on Security and Privacy, pages 296-304, Washington DC, USA, 1990.
3. J. Jung, V. Paxson, A. Berger and H. Balakrishnan. Fast Portscan Detection Using Sequential Hypothesis Testing. In Proceedings of the IEEE Symposium on Security and Privacy, Berkeley, CA, United States, May 2004.
4. R. Kompella, S. Singh, and G. Varghese. On Scalable Attack Detection in the Network. In Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, pages 187-200, Washington DC, USA, 2004.
5. C. Leckie and R. Kotagiri. A Probabilistic Approach to Network Scan Detection. In Proceedings of the 8th IEEE Network Operations and Management Symposium (NOMS 2002), pages 369-372, April 2002.
6. K. Levchenko, R. Paturi and G. Varghese. On the Difficulty of Scalably Detecting Network Attacks. In Proceedings of the 11th ACM Conference on Computer and Communications Security, pages 12-20, Washington DC, USA, October 2004.
7. S. Nortcutt and J. Novak. Network Intrusion Detection: An Analysts's Handbook. Riders Publishing, second edition, 2000.
8. V. Paxson. Bro: A System for Detecting Network Intruders in Real-Time. Computer Networks, 31(23-24):2435-2463, 1999.
9. S. Robertson, E. Siegel, M. Miller and S. Stolfo. Surveillance Detection in High Bandwidth Environments. In. Proceedings of the 2003 DARPA Information Survivability Conference and Exposition, pages 130-139, Washington DC, USA, April 2003.
10. M. Roesch. Snort: Lightweight Intrusion Detection for Networks. In Proceedings of the 13th Conference on Systems Administration(LISA-99), pages 229-238, Berkeley, CA, United States, November 1999. USENIX Association.
11. J. Sommers, V. Yegneswaranand P. Barford. A Framework for Malicious Workload Generation. In Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, pages 82-87, Sicily, Italy, October 2004.
12. S. Staniford, J. Hoagland and J. McAlerney. Practical Automated Detection of Stealthy Portscans. Journal of Computer Security, 10(1-2):105-136, 2002.
13. C. Taylor and J. Alves-Foss. NATE: Network Analysis of Anomalous Traffic Events, a low-cost approach. In Proceedings of the 2001 Workshop on New Security Paradigms, pages 89 - 96, Cloudcroft, New Mexico, September 2001.
14. V Yegneswaran, P. Barford and J. Ullrich. Internet Intrusions: Global Characteristics and Prevalence. In Proceedings of ACM SIGMETRICS, June 2003.
15. D. Zhang. Network Intrusion Detection Techniques for Single Source and Coordinated Scans. Honours thesis, The University Of Melbourne, 2005.