Titlebook: Recent Advances in Intrusion Detection; 13th International S Somesh Jha,Robin Sommer,Christian Kreibich Conference proceedings 2010 Springe

积习已深

Recent Advances in Intrusion Detection978-3-642-15512-3Series ISSN 0302-9743 Series E-ISSN 1611-3349

antedate

0302-9743 Overview: up-to-date results.fast track conference proceedings.state-of-the-art report978-3-642-15511-6978-3-642-15512-3Series ISSN 0302-9743 Series E-ISSN 1611-3349

Boycott

JADED

jumble

LEER

流浪者

CANVuS: Context-Aware Network Vulnerability Scanningbuilding network context for enterprise security applications by using existing passive data sources and common network formats. Using this architecture, we built CANVuS, a context-aware network vulnerability scanning system that triggers scanning operations based on changes indicated by network act

彻底明白

HyperCheck: A Hardware-Assisted Integrity Monitor Moreover, HyperCheck is robust against attacks that aim to disable or block its operation. Our experimental results show that HyperCheck can produce and communicate a scan of the state of the protected software in less than 40ms.

ureter

Kernel Malware Analysis with Un-tampered and Temporal Views of Dynamic Kernel Memory view wherein the mapping of kernel data is unaffected by the manipulation of kernel memory and (2) a temporal view of kernel objects to be used in temporal analysis of kernel execution. We demonstrate the effectiveness of allocation-driven mapping in two usage scenarios. First, we build a hidden ke

prolate

Generating Client Workloads and High-Fidelity Network Traffic for Controllable, Repeatable Experimen that allow us to quickly and efficiently reproduce reasonable mock-ups of remotely-hosted applications to give the illusion of Internet connectedness on an isolated testbed. We demonstrate the utility of these techniques in an example experiment comparing the system resource consumption of a Window