See this document in CiteSeerX!

The Work of Intrusion Detection: (2004)  (Make Corrections)  
Rethinking the Role of Security Analysts John R. Goodall Wayne ...



  Home/Search   Context   Related

 
View or download:
umbc.edu/~lutters/...utters,Komlodi.pdf
Cached:  PS.gz  PS  PDF   Image  Update  Help

From:  umbc.edu/~lutters/publications (more)
(Enter author homepages)

Rate this article: (best)
  Comment on this article  
(Enter summary)

Abstract: Intrusion detection (ID) systems have become increasingly accepted as an essential layer in the information security infrastructure. However, there has been little research into understanding the human component of ID work. Currently, security analysts face an increasing workload as their environments expand and attacks become more frequent. We conducted contextual interviews with security analysts to gain an understanding of the people and work of ID. Our findings reveal that organizational... (Update)

Active bibliography (related documents):   More   All
1.1:   The Work of Intrusion Detection: Rethinking The Role of.. - Goodall, Lutters.. (2004)   (Correct)
0.7:   I Know My Network: Collaboration And Expertise - Goodall, Lutters, Komlodi (2004)   (Correct)
0.3:   A User-centered Look at Glyph-based Security.. - Komlodi, Rheingans.. (2005)   (Correct)

Similar documents based on text:
0.0:   Unknown -   (Correct)

BibTeX entry:   (Update)

@misc{ role-work,
  author = "Rethinking The Role",
  title = "The Work of Intrusion Detection:",
  url = "citeseer.ist.psu.edu/760689.html" }
Citations (may not include all citations):
140   Snort - Lightweight Intrusion Detection for Networks (context) - Roesch - 1999
63   Intrusion Detection Using Sequences of System Calls - Hofmeyr, Forrest et al. - 1998  DBLP
40   Aggregation and Correlation of Intrusion-Detection Alerts (context) - Debar, Wespi - 2001  ACM   DBLP
38   Probabilistic Alert Correlation - Valdes, Skinner - 2001  ACM   DBLP
35   State of the Practice of Intrusion Detection Technologies - Allen, Christie et al. - 1999
21   Intrusion and Misuse Detection in Large-Scale Systems (context) - Erbacher, Walker et al. - 2002  DBLP
14   Information Visualization: Using Vision to Think (context) - Card, Mackinlay et al. - 1999
12   Basics of Qualitative Research: Techniques and Procedures fo.. (context) - Strauss, Corbin - 1998
10   Clustering Intrusion Detection Alarms to Support Root Cause .. - Julisch - 2003  ACM   DBLP
9   Mining Intrusion Detection Alarms for Actionable Knowledge - Julisch, Dacier - 2002
9   Intrusion and Intrusion Detection (context) - McHugh - 2001
8   Adaptive Intrusion Detection: A Data Mining Approach - Lee, Stolfo et al. - 2000  DBLP
5   Maintaining Perspective on Who Is the Enemy in the Security .. - Yurcik, Barlow et al. - 2003
5   An Information Visualization Framework for Intrusion Detecti.. - Komlodi, Goodall et al. - 2004

Documents on the same site (http://www.research.umbc.edu/~lutters/publications.htm):   More
Recapturing What Was Lost: Re-emphasizing Locality in Social.. - Lutters, Hou (2005)   (Correct)
Conversations with the Past: Community, Technology and.. - Lutters (2004)   (Correct)
Why Use Memo for All? Restructuring Mobile Applications to.. - Dai, Lutters, Bower (2005)   (Correct)

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC