Titlebook: Recent Advances in Intrusion Detection; 6th International Sy Giovanni Vigna,Christopher Kruegel,Erland Jonsson Conference proceedings 2003

pacific

极小量

Two Sophisticated Techniques to Improve HMM-Based Intrusion Detection Systemsors and combining multiple models to reduce the false-positive error rate. Experimental results with real audit data show that the proposed method requires significantly shorter time to train HMM without loss of detection rate and significantly reduces the false-positive error rate.

Servile

insolence

SUE

晚间

affect

maroon

Statistical Causality Analysis of INFOSEC Alert Dataentication services, the problem of alert analysis has become very important. The large amount of alerts can overwhelm security administrators and prevent them from adequately understanding and analyzing the security state of the network, and initiating appropriate response in a timely fashion. Rece

诱使

Correlation of Intrusion Symptoms: An Application of Chroniclesnguage and a recognition system that is used in other areas where dynamic systems are monitored. This formalism allows us to reduce the number of alarms shipped to the operator and enhances the quality of the diagnosis provided.

Agility

Modeling Computer Attacks: An Ontology for Intrusion Detectionecognition, reporting and correlation languages. We have produced an ontology specifying a model of computer attack using the DARPA Agent Markup Language+Ontology Inference Layer, a descriptive logic language. The ontology’s logic is implemented using DAMLJessKB. We compare and contrast the IETF’s I