Previous
On The Design And Use Of Internet Sinks For Network Abuse Monitoring
White Papers Monitoring unused or dark IP addresses offers opportunities to significantly improve and expand knowledge of abuse activity without many of the problems associated with typical network intrusion detection and firewall systems.
[January 9, 2008, 0:01]
You've Been Hacked: Now Prevent Future Attacks
News Intrusion-detection software That's where intrusion detection comes in. An intrusion-detection system (IDS) constantly watches your network and alerts you or takes other actions when an intruder is detected.
[June 3, 2003, 9:16]
Micromuse Extends To Security Management
News Netcool for Security Management is based on Micromuse's Netcool OMNIbus fault-management platform, but monitors alerts from virtual private networks, firewalls, antivirus programs, authentication mechanisms, intrusion detection systems and...
[January 29, 2002, 11:22]
Linux Snares Security Tool
News The two systems differ in that while a network-based intrusion detection tool enables the user to determine when an intrusion is being attempted, the host-based system allows the user to identify when an intrusion has been successful.
[November 7, 2001, 14:51]
Sandstorm Secures Enterprise Networks Using Embedded MySQL
White Papers Existing network monitoring and Intrusion Detection Systems (IDS) cannot provide all the information that network managers need to pinpoint network problems and investigate security breaches. To solve this problem, Sandstorm Enterprises developed...
[October 11, 2006, 0:00]
Host-Based Intrusion Detection Systems
White Papers This paper recognizes four different methods of host-based intrusion detection: filesystem monitoring, logfile analysis, connection analysis and kernel-based intrusion detection. Host-based Intrusion Detection Systems can be used to determine if a...
[June 3, 2008, 6:15]
Effective Strategies For Risk Management: Business Process Protection Through Assessment, Planning, And Recovery
White Papers Based on its experience in running critical Internet infrastructure services and the data gathered through the monitoring of intrusion detection systems and networks in VeriSigns Managed Security Services (MSS) environment as well as from the...
[May 3, 2007, 9:41]
A Justification For Intrusion Detection
White Papers Intrusion detection is critical to monitoring compliance with every network security policy, so this document discusses intrusion detection and some considerations that justify it and help improve business.
[March 2, 2007, 0:13]
An Introduction To Intrusion-Detection Systems
White Papers Therefore, intrusion-detection systems have the task of monitoring the usage of such systems to detect any apparition of insecure states. Intrusion-detection systems aim at detecting attacks against computer systems and networks or, in general...
[May 21, 2008, 1:01]
Reasoning About Complementary Intrusion Evidence
White Papers This paper presents techniques to integrate and reason about complementary intrusion evidence such as alerts generated by Intrusion Detection Systems (IDSs) and reports by system monitoring or vulnerability scanning tools.
[June 9, 2006, 1:00]
NIST Special Publication On Intrusion Detection Systems
White Papers Intrusion Detection Systems (IDSs) are software or hardware systems that automate the process of monitoring the events occurring in a computer system or network, analyzing them for signs of security problems.
[July 11, 2008, 1:20]
Improving The Performance Of Passive Network Monitoring Applications Using Locality Buffering
White Papers This paper presents a novel approach for improving the performance of a large class of CPU and memory intensive passive network monitoring applications, such as intrusion detection systems, traffic characterization applications, and NetFlow export...
[March 4, 2008, 0:02]
Global Intrusion Detection In The DOMINO Overlay System
White Papers This paper describes and evaluates DOMINO (Distributed Overlay for Monitoring InterNet Outbreaks); architecture for a distributed intrusion detection system that fosters collaboration among heterogeneous nodes organized as an overlay network.
[June 30, 2008, 0:53]
Improving The Database Logging Performance Of The Snort Network Intrusion Detection Sensor
White Papers Publicly available Network Intrusion Detection Systems (NIDS) such as Snort and Bro as well as a large number of commercial systems complement other security mechanisms by passively monitoring a network link for possible intrusions and other...
[June 3, 2008, 6:16]
Capacity Verification For High-Speed Network Intrusion Detection Systems
White Papers Commercially available Network Intrusion Detection Systems (NIDS) came onto the market over six years ago. These systems have gained acceptance as a viable means of monitoring the security of consumer networks, yet no commercial standards exist to...
[July 11, 2008, 1:20]
Distributed NIDS: A HOW-TO Guide
White Papers Network Intrusion Detection Systems (NIDSs) can be an invaluable tool if implemented and used effectively. A properly configured system can be a great utility for monitoring and tracking network activity, watching network trends and observing...
[January 27, 2004, 1:02]
Multidimensional Network Monitoring For Intrusion Detection
White Papers The methods of data analysis and pattern recognition presented are the basis of a technology study for an automatic intrusion detection system that detects the attack in the reconnaissance stage. The network traffic description is synthesized by...
[March 4, 2008, 0:02]
Doing Intrusion Detection Using Embedded Sensors- Thesis Proposal
White Papers Intrusion detection systems have usually been developed using large host-based components. Additionally, intrusion detection systems have usually obtained information about host behavior through indirect means, such as audit trails or network...
[April 5, 2004, 4:25]
Learning Program Behavior Profiles For Intrusion Detection
White Papers In order to detect future attacks against systems, intrusion detection systems must be able to generalize from past observed behavior. The performance of these systems is compared by testing them with data provided by the DARPA Intrusion Detection...
[October 7, 2003, 2:13]
Modeling Intrusion Detection System Using Hybrid Intelligent Systems
White Papers The process of monitoring the events occurring in a computer system or network and analyzing them for sign of intrusions is known as Intrusion Detection System (IDS). Empirical results illustrate that the proposed hybrid systems provide more...
[July 10, 2008, 0:08]
