See this document in CiteSeerX!

Improving Intrusion Analysis Effectiveness  (Make Corrections)  
Robert F. Erbacher, Karl Sobylak



  Home/Search   Context   Related

 
View or download:
albany.edu/~erbach...sEffectiveness.pdf
Cached:  PS.gz  PS  PDF   Image  Update  Help

From:  albany.edu/~erbacher/publicati... (more)
(Enter author homepages)

Rate this article: (best)
  Comment on this article  
(Enter summary)

Abstract: Analysis vs. analysis The volume of data available to the analyst for the forensic analysis of an intrusion or other form of successful attack is enormous. Clearly, analyzing the textual data would be prohibitive as a networked environment will generate tens of thousands of log messages a day. In complex cases, where events must be correlated both temporally and spatially, the task is daunting. Many techniques are applicable to aid the analyst, including: data mining, machine learning, and... (Update)

Active bibliography (related documents):   More   All
1.6:   Visual Behavior Characterization for Intrusion and Misuse.. - Erbacher, Frincke (2001)   (Correct)
1.1:   Visual Behavior Characterization For Intrusion Detection In.. - Erbacher (2001)   (Correct)
1.0:   Glyph-Based Generic Network Visualization - Erbacher (2002)   (Correct)

Similar documents based on text:   More   All
0.6:   Defining Digital Forensic Examination and Analysis Tools Using.. - Carrier (2002)   (Correct)
0.4:   Analysis and Application of Node Layout Algorithms for.. - Erbacher, Teng (2003)   (Correct)
0.3:   Computer Forensics: Training and Education - Erbacher   (Correct)

BibTeX entry:   (Update)

@misc{ erbacher-improving,
  author = "Robert F. Erbacher and Karl Sobylak",
  title = "Improving Intrusion Analysis Effectiveness",
  url = "citeseer.ist.psu.edu/541101.html" }
Citations (may not include all citations):
176   Exploratory Data Analysis (context) - Tukey - 1977
59   Measuring the Web (context) - Bray - 1999
21   Intrusion and Misuse Detection in Large-Scale Systems (context) - Erbacher, Walker et al. - 2002
17   Visualizing Network Data - Becker, Eick et al. - 1999
8   What Your Database Hides Away (context) - Davidson - 1993
8   Network Visualization with Nam, the VINT Network Animator (context) - Estrin, Handley et al. - 2000
7   Handbook of Statistical Methods (context) - SEMA - 2002
7   PostgreSQL: Introduction and Concepts (context) - Momjian - 2000
7   A FrameWork for Cooperative Intrusion Detection (context) - Polla, McConnell et al. - 1998
6   3D geographic network displays (context) - Cox, Eick et al. - 1996
6   Visualizing Large-Scale Telecommunication Networks and Servi.. (context) - Koutsofios, North et al. - 1999
6   Hacking Exposed: Network Security Secrets and Solutions (context) - Scambray, McClure et al. - 2000
5   Constructing Interactive Visual Network Interfaces (context) - He, Eick - 1998
5   Visual Perception and Imaging (context) - Gross, Computing et al. - 1994
4   Navigating Large Networks with Heirarchies (context) - Eick, Wills - 1993
3   Graphical methods to analyze network data (context) - Becker, Eick et al. - 1993
2   Visual Behavior Characterization for Intrusion Detection in .. - Erbacher - 2001
1   A Component-Based Event-Driven Interactive Visualization Sof.. - Erbacher - 2002
1   Intrusion Detection Data: Collection and Analysis (context) - Erbacher, Augustine - 2002
1   Visualization alternatives: non-pixel based images (context) - Grinstein, Levkowitz et al. - 1993
1   Strategies for scientific visualization: analysis and compar.. (context) - Berton - 1990
1   Proceedings of Visual Data Exploration and Analysis VII (context) - Roberts, Multiform - 2000

Documents on the same site (http://www.cs.albany.edu/~erbacher/publications/):   More
Visual Behavior Characterization For Intrusion Detection In.. - Erbacher (2001)   (Correct)
A Component-Based Event-Driven Interactive Visualization.. - Erbacher (2002)   (Correct)
Visually Directed Debugging of Concurrent Programs - Erbacher, Grinstein   (Correct)

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC