See this document in CiteSeerX!

Bayesian Event Classification for Intrusion Detection (2003)  (Make Corrections)  (1 citation)
Christopher Kruegel Darren Mutz William Robertson Fredrik Valeur Reliable...



  Home/Search   Context   Related

 
View or download:
auto.tuwien.ac.at/~chris/...2003_07.pdf
Cached:  PS.gz  PS  PDF   Image  Update  Help

From:  auto.tuwien.ac.at/...publications (more)
(Enter author homepages)

Rate this article: (best)
  Comment on this article  
(Enter summary)

Abstract: Intrusion detection systems (IDSs) attempt to identify attacks by comparing collected data to predefined signatures known to be malicious (misuse-based IDSs) or to a model of legal behavior (anomaly-based IDSs). Anomaly-based approaches have the advantage of being able to detect previously unknown attacks, but they suffer from the difficulty of building robust models of acceptable behavior which may result in a large number of false alarms. Almost all current anomaly-based intrusion detection... (Update)

Cited by:   More
Visualizing and Identifying Intrusion Context from System Calls.. - Li, Das (2004)   (Correct)

Active bibliography (related documents):   More   All
2.3:   Bayesian Event Classification for Intrusion Detection - Christopher Kruegel Darren (2003)   (Correct)
0.3:   A Multiagent Approach to Outbound Intrusion Detection - Mandujano (2004)   (Correct)
0.3:   Utilizing Statistical Characteristics of N-grams for.. - li, das, nandi (2003)   (Correct)

Similar documents based on text:
3.0:   Unknown -   (Correct)

BibTeX entry:   (Update)

C. Kruegel, D. Mutz, W. Robertson, and F. Valeur. Bayesian event classification for intrusion detection. In 19th Annual Computer Security Applications Conference,LasVe- gas, Nevada, December 08 - 12 2003. http://citeseer.ist.psu.edu/kruegel03bayesian.html   More

@misc{ kruegel03bayesian,
  author = "C. Kruegel and D. Mutz and W. Robertson and F. Valeur",
  title = "Bayesian event classification for intrusion detection",
  text = "C. Kruegel, D. Mutz, W. Robertson, and F. Valeur. Bayesian event classification
    for intrusion detection. In 19th Annual Computer Security Applications Conference,LasVe-
    gas, Nevada, December 08 - 12 2003.",
  year = "2003",
  url = "citeseer.ist.psu.edu/kruegel03bayesian.html" }
Citations (may not include all citations):
1543   Probabilistic Reasoning in Intelligent Systems: Networks of .. (context) - Pearl - 1997
466   Probability and Measure (context) - Billingsley - 1995
142   A Sense of Self for UNIX Processes - Forrest - 1996
140   Snort - Lightweight Intrusion Detection for Networks (context) - Roesch - 1999
133   IEEE Transactions on Software Engineering (context) - Denning, Detection - 1987
132   EMERALD: Event Monitoring Enabling Responses to Anomalous Li.. - Porras, Neumann - 1997
60   Detecting intrusions using system calls: Alternative data mo.. - Warrender, Forrest et al. - 1999
59   USTAT: A Real-time Intrusion Detection System for UNIX - Ilgun - 1993
52   Bayesian Networks and Decision Graphs (context) - Jensen - 2001
50   NetSTAT: A Network-based Intrusion Detection System - Vigna, Kemmerer - 1999
48   Inducing probabilistic grammars by bayesian model merging - Stolcke, Omohundro - 1994
41   The SRI IDES Statistical Anomaly Detector (context) - Javitz, Valdes - 1991
22   DARPA Intrusion Detection Evaluation (context) - Labs - 1999
19   Testing Intrusion Detection Systems: A Critique (context) - McHugh - 1998
17   The Base-Rate Fallacy and its Implications for the Difficult.. - Axelsson - 1999
13   Model-based Monitoring for Cyber Attack Detection (context) - Valdes, Skinner - 2000
9   Service Specific Anomaly Detection for Network Intrusion Det.. (context) - Kruegel, Toth et al. - 2002
7   Live traffic analysi TCPIP gateway (context) - Valdes, analysis et al. - 1998
3   Bayesian Classification Model for Real-Time Intrusion Detect.. (context) - Puttini, Marrakchi et al. - 2002
3   Active Platform Security through Intrusion Detection Using N.. - Sebyala, Olukemi et al. - 2002
2   A Stochastic Model for Intrusions (context) - Goldman - 2002
2   http: //docs (context) - Module, --
http://www.intersectalliance.com/
http://www.iss.net/products_
http://www.sis.pitt.edu/genie/

Documents on the same site (http://www.auto.tuwien.ac.at/~chris/research/publications.html):   More
Protecting Users against Phishing Attacks - Kirda, Kruegel (2005)   (Correct)
Connection-History Based Anomaly Detection - Toth, Krügel (2002)   (Correct)
Noxes: A Client-Side Solution for Mitigating.. - Kirda, Kruegel.. (2006)   (Correct)

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC