Christopher Kruegel, Fredrik Valeur, Giovanni Vigna

Intrusion Detection and Correlation (eBook, PDF)

Challenges and Solutions

• Format: PDF

Produktbeschreibung

While virus scanners and firewalls have visible benefits and remain virtually unnoticed during normal operations, the situation is different with intrusion detection sensors. State-of-the-art Intrusion detection systems (IDSs) produce hundreds or even thousands of alerts every day. Unfortunately, almost all of these alerts are false positives, that is, they are not related to security-relevant incidents.This book analyzes the challenges in interpreting and combining (or, correlating) alerts produced by these systems. In addition, existing academic and commercial systems are classified; their advantage and shortcomings are presented, especially in the case of deployment in large, real-world sites.

---

Dieser Download kann aus rechtlichen Gründen nur mit Rechnungsadresse in A, B, BG, CY, CZ, D, DK, EW, E, FIN, F, GR, HR, H, IRL, I, LT, L, LR, M, NL, PL, P, R, S, SLO, SK ausgeliefert werden.

Produktdetails

• Verlag: Springer US
• Seitenzahl: 118
• Erscheinungstermin: 29. Dezember 2005
• Englisch
• ISBN-13: 9780387233994
• Artikelnr.: 37286774

Autorenporträt

Christopher Kruegel, University of California, Santa Barbara, CA, USA / Fredrik Valeur, University of California, Santa Barbara, CA, USA / Giovanni Vigna, University of California, Santa Barbara, CA, USA

Inhaltsangabe

Computer Security and Intrusion Detection.- Alert Correlation.- Alert Collection.- Alert Aggregation and Verification.- High-Level Alert Structures.- Large-Scale Correlation.- Evaluation.- Open Issues.- Conclusions.