Viewing IDS alerts: Lessons from SnortSnarf

Proceedings - DARPA Information Survivability Conference and Exposition II, DISCEX 2001

Volumn 1, Issue , 2001, Pages 374-386

  Hoagland, J A ^a   Staniford, S ^a  

^a Silicon Defense   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; MERCURY (METAL); USER INTERFACES;

AUDIT RECORDS; CONSOLE DESIGN; FALSE ALARMS; INTRUSION DETECTION SYSTEMS; POSSIBLE FUTURES; REAL ESTATE; SECURITY PERSONNEL; WEB-BASED PROTOTYPE;

INTRUSION DETECTION;

EID: 84964499569     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2001.932232     Document Type: Conference Paper

References (5)

1. Hoagland, James, "CGI FPI and Pipeline," WEBsmith, v.4, July, 1996.
2. Hoagland, James, http://seclab.cs.ucdavis.edu/hoagland/pipeline/.
3. Roesch, Martin, http://www.snort.org/.
4. Roesch, Martin, "Snort - Lightweight Intrusion Detection for Networks," In Proc. of the USENIX LISA Conference, November 1999.
5. Staniford, S., J. Hoagland and J. McAlerney. "Practical Automated Detection of Stealthy Portscans". In Proc. of the ACM CCS IDS Workshop, November 2000