Proposals on assessment environments for anomaly-based network intrusion detection systems

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4347 LNCS, Issue , 2006, Pages 210-221

  Bermudez Edo M ^a   Salazar Hernandez R ^a   Diaz Verdejo J ^a   Garcia Teodoro P ^a  

^a UNIVERSITY OF GRANADA   (Spain)

Author keywords

Assessment; IDS; Intrusion event; Network security

Indexed keywords

ASSESSMENT; ASSESSMENT METHODOLOGIES; IDS; INTRUSION DETECTION APPROACHES; INTRUSION EVENTS; NETWORK INTRUSION DETECTION SYSTEMS;

CRITICAL INFRASTRUCTURES; NETWORK SECURITY;

INTRUSION DETECTION;

EID: 78149381260     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11962977_17     Document Type: Conference Paper

References (21)

1. Bologna S. & Setola R.: The need to improve local self-awareness in CIP/CIIP. In Proceedings of the First International Workshop on Critical Infrastructure Protection (IWCIP), 2005.
2. Lopez J., Montenegro J.A., Roman R.: Service-Oriented Security Architecture for CII based on Sensor Networks. In Proceedings of the Second International Workshop on Security, Privacy and Trust in Pervasive and Ubiquitous Computing (SecPerU), 2006.
3. CERT coordination Center statistics, (2006). http://www.cert.org/stats/ cert-stats.html
4. Anderson, JP. Computer security threat monitoring and surveillance. Technical report - Fort Washington. (1980)
5. Axelsson, S. Intrusion Detection Systems: A Survey and Taxonomy. Technical Report 99-15, Depart. of Computer Engineering, Chalmers University, march (2000)
6. Kabiri P., Ghorbani A. "Research on Intrusion detection and response: A survey". International Journal on Network Security. Vol. 1 No 2, pp84-102. (2005)
7. Porras, A., and Valdes, A. Live traffic analysis of tcp/ip gateways. Proc. ISOC Symp.on Network and Distributed Systems Security (NDSS) San Diego, CA. Internet society. (1998)
8. Estevez-tapiador, J.M. Detección de intrusiones en redes basadas en anomalías mediante técnicas de modelado de protocolos. PhD Thesis University of Granada. (2004)
9. McHugh, J. The 1998 Lincoln Laboratory IDS Evaluation. A critique. In RAID 2000, LNCS 1907, pp 145-161. (2000)
10. Athanasiades, N., Abler, R., Levine, J., Owen, H., and Riley, G. 2003. Intrusion detection testing and benchmarking methodologies. In proceedings 1st IEEE International Workshop on Information Assurance (IWIA), pp. 63-72. IEEE Computer society Press. (2003)
11. Pukenza, N., Zhang, K., Chung, M., Mukherjee, B., and Olsson, R. A methodology for testing intrusion detection systems. IEEE Software. 14(5):43-51. (1997)
12. Lippmann, R., Haines, J., Fried, D., Korba, J., and Das, K. Analysis and results of the 1999 DARPA off-Line Intrusion Detection Evaluation. In Computer Networks34(4) 579-595. (2000)
13. Mahoney M. & Chan P.K. An analysis of the 1999 DARPA/Lincoln Laboratory evaluation Data for Network Anomaly Detection. In Florida Tech. tech report CS-2003-02. (2003)
14. Rossey, L., Rabek, J., Cunnigham, R., Fried, R., Lippmann, R., and Zissmann, R. Lariat: Lincoln adaptable real-time information assurance test-bed. In International Sypnotium on Recent Advances in Intrusion Detection (RAID) (2001)
15. th International Workshop on Software Performance (WOSP). (2004)
16. Danzing, P., Mogul, J., Paxson, V., and Schwartz, M. The internet traffic archive. http://ita.ee.lbl.gov/html/traces.html
17. Davison, B.D. Web Caching Resources. (1999). http://www.web-caching.com/
18. Fan, J., Xu, J., Ammar, M. H., and Moon, S. B. Prefix-preserving IP address anonymization: measurement-based security evaluation and a new cryptography-based scheme. Comput. Networks 46, 2 (2004), 253-272.
19. Duda, R., and Hart, P: Pattern Classification and Scene Analysis. John Wiley and Sons, 1973
20. rd IEEE ICDM (2003)
21. Roesch, M. Snort-Lightweight Intrusion Detection for Networks. Proc. USENIX Lisa (1999)