Stateful intrusion detection for high-speed network's

Proceedings - IEEE Symposium on Security and Privacy

Volumn 2002-January, Issue , 2002, Pages 285-293

  Kruegel, C ^a   Valeur, F ^a   Vigna, G ^a   Kemmerer, R ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Bandwidth; Computer network management; Ethernet networks; High speed networks; Intrusion detection; Performance analysis; Presses; Protection; Telecommunication traffic; Throughput

Indexed keywords

BANDWIDTH; COMPUTER NETWORKS; ETHERNET; HIGH SPEED NETWORKS; INTRUSION DETECTION; MERCURY (METAL); NETWORK MANAGEMENT; PRESSES (MACHINE TOOLS); TELECOMMUNICATION TRAFFIC; THROUGHPUT;

ANALYSIS TECHNIQUES; ETHERNET NETWORKS; EXPERIMENTAL EVALUATION; NETWORK-BASED INTRUSION DETECTION; OVERALL NETWORK TRAFFICS; PERFORMANCE ANALYSIS; PROTECTION; TRAFFIC PARTITIONING;

NETWORK SECURITY;

EID: 84948431640     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECPRI.2002.1004378     Document Type: Conference Paper

References (12)

1. CISCO. CISCO Intrusion Detection System. Technical Information, Nov 2001.
2. S.T. Eckmann, G. Vigna, and R.A. Kemmerer. STATL: An Attack Language for State-based Intrusion Detection. In Proceedings of the ACM Workshop on Intrusion Detection Systems, Athens, Greece, November 2000.
3. NSS Group. Intrusion Detection and Vulnerability Assessment. Technical report, NSS, Oakwood House, Wennington, Cambridgeshire, UK, 2000.
4. ISS. BlackICE Sentry Gigabit. http://www.networkice.com/products/sentry-gigabit, November 2001.
5. MIT Lincoln Laboratory. DARPA Intrusion Detection Evaluation. http://www.ll.mit.edu/IST/ideval/, 1999.
6. V. Paxson. Bro: A System for Detecting Network Intruders in Real-Time. In Proceedings of the 7th USENIX Security Symposium, San Antonio, TX, January 1998.
7. J. Pouzol and M. Ducassé. From Declarative Signatures to Misuse IDS. In W. Lee, L. Mé, and A. Wespi, editors, Proceedings of the RAID International Symposium, volume 2212 of LNCS, pages 1-21, Davis, CA, October 2001. Springer-Verlag.
8. M. Roesch. Writing Snort Rules: How To write Snort rules and keep your sanity. http://www.snort.org.
9. M. Roesch. Snort - Lightweight Intrusion Detection for Networks. In Proceedings of the USENIX LISA '99 Conference, November 1999.
10. R. Sekar, V. Guang, S. Verma, and T. Shanbhag. A High-performance Network Intrusion Detection System. In Proceedings of the 6th ACM Conference on Computer and Communications Security, November 1999.
11. Toplayer networks. http://www.toplayer.com, November 2001.
12. M. Undy. tcpreplay. Software Package, May 1999.