Titlebook: Recent Advances in Intrusion Detection; 13th International S Somesh Jha,Robin Sommer,Christian Kreibich Conference proceedings 2010 Springe

NICHE

Behavior-Based Worm Detectors Comparedand file sharing traffic can cause the detectors to perform poorly. No single detector stands out as suitable for all situations. For instance, connection failure monitoring is the most effective algorithm in many environments, but it fails badly at detecting topologically aware worms.

Phonophobia

Improving NFA-Based Signature Matching Using Ordered Binary Decision Diagramsroving their time-efficiency. Experiments using Snort HTTP and FTP signature sets show that an NFA-OBDDs-based representation of regular expressions can outperform traditional NFAs by up to three orders of magnitude and is competitive with a variant of DFAs, while still remaining as compact as NFAs.

费解

BotSwindler: Tamper Resistant Injection of Believable Decoys in VM-Based Hosts for Crimeware Detectig compromises. Additionally, using a computational analysis and a user study, we illustrate the believability of the simulations and we demonstrate that they are sufficiently human-like. Finally, we provide results from performance measurements to show our approach does not impose a performance burden.

apiary

Conjuction

Veneer

Community Epidemic Detection Using Time-Correlated Anomaliesand polymorphism. This work provides a mathematical basis for Syzygy, describes our particular implementation, and tests the approach with a variety of exploits and on commodity server and desktop applications to demonstrate its effectiveness.

colony

Lecture Notes in Computer Sciencehttp://image.papertrans.cn/r/image/822806.jpg

Incommensurate

https://doi.org/10.1007/978-3-642-15512-3Protection; access protection; artificial intelligence; digital biometrics; firewall; intrusion detection

创造性

Somesh Jha,Robin Sommer,Christian Kreibichup-to-date results.fast track conference proceedings.state-of-the-art report

主讲人