The Work of Intrusion Detection: Rethinking the Role of Security Analysts

10th Americas Conference on Information Systems, AMCIS 2004

Volumn , Issue , 2004, Pages 1421-1427

  Goodall, John R ^a   Lutters, Wayne G ^a   Komlodi, Anita ^a  

^a University of Marylandw Baltimore County

Author keywords

expertise; field study; Information security; intrusion detection; socio technical systems

Indexed keywords

EXPERTISE; FIELD STUDIES; HUMAN COMPONENTS; INTRUSION DETECTION SYSTEMS; INTRUSION-DETECTION; ORGANIZATIONAL CHANGE; SECURITIES ANALYSTS; SECURITY INFRASTRUCTURE; SOCIOTECHNICAL SYSTEMS; TECHNICAL TOOLS;

INTRUSION DETECTION;

EID: 85139020324     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. Allen, J., Christie, A., Fithen, W., McHugh, J., Pickel, J. and Stoner, E. (1999) State of the Practice of Intrusion Detection Technologies, CMU/SEI-99-TR-028.
2. Card, S. K., Mackinlay, J. D. and Shneiderman, B. (1999) Information Visualization: Using Vision to Think, Morgan Kaufman Publishers, San Francisco, CA.
3. Debar, H. and Wespi, A. (2001) Aggregation and Correlation of Intrusion-Detection Alerts, Recent Advances in Intrusion Detection (RAID), 85-103.
4. Erbacher, R. F., Walker, K. L. and Frincke, D. A. (2002) Intrusion and Misuse Detection in Large-Scale Systems, IEEE Computer Graphics and Applications, 22, 1, 38-48.
5. Hofmeyr, S. A., Forrest, S. and Somayaji, A. (1998) Intrusion Detection Using Sequences of System Calls, Journal of Computer Security, 6, 3, 151-180.
6. Julisch, K. and Dacier, M. (2002) Mining Intrusion Detection Alarms for Actionable Knowledge, Proceedings of ACM Conference on Knowledge Discovery and Data Mining, 366-375.
7. Julisch, K. (2003) Clustering Intrusion Detection Alarms to Support Root Cause Analysis, ACM Transactions on Information and System Security, 6, 4, 443-471.
8. Komlodi, A., Goodall, J. R. and Lutters, W. G. (2004) An Information Visualization Framework for Intrusion Detection. Proceedings of ACM Conference on Human Factors in Computing Systems (CHI), in press.
9. Lee, W., Stolfo, S. J. and Mok, K. W. (2000) Adaptive Intrusion Detection: A Data Mining Approach, Artificial Intelligence Review, 14, 6, 533-567.
10. McHugh, J. (2001) Intrusion and Intrusion Detection, International Journal of Information Security, 1, 1, 14-35.
11. Roesch, M. (1999) Snort-Lightweight Intrusion Detection for Networks, Proceedings of Thirteenth Systems Administration Conference (LISA), 229-238.
12. nd Edition. Sage Publications, Thousand Oaks, CA.
13. Valdes, A. and Skinner, K. (2001) Probabilistic Alert Correlation, Recent Advances in Intrusion Detection (RAID), 54-68.
14. Yurcik, W., Barlow, J. and Rosendale, J. (2003) Maintaining Perspective on Who Is the Enemy in the Security Systems Administration of Computer Networks, ACM CHI Workshop on System Administrators Are Users, Too.