Intrusion Detection: Towards scalable intrusion detection

Authors:
Siraj A. Shaikh;Howard Chivers;Philip Nobles;John A. Clark;Hao Chen
Affiliations:
Department of Informatics and Sensors, Cranfield University, UK;Department of Informatics and Sensors, Cranfield University, UK;Department of Informatics and Sensors, Cranfield University, UK;Department of Computer Science, University of York, UK;Department of Computer Science, University of York, UK
Venue:
Network Security
Year:
2009

Citing 23
Cited 1

A high-performance network intrusion detection system

CCS '99 Proceedings of the 6th ACM conference on Computer and communications security
Using internal sensors and embedded detectors for intrusion detection

Journal of Computer Security
Practical automated detection of stealthy portscans

Journal of Computer Security
How to Own the Internet in Your Spare Time

Proceedings of the 11th USENIX Security Symposium
Two Formal Analys s of Attack Graphs

CSFW '02 Proceedings of the 15th IEEE workshop on Computer Security Foundations
Automated Generation and Analysis of Attack Graphs

SP '02 Proceedings of the 2002 IEEE Symposium on Security and Privacy
Stateful Intrusion Detection for High-Speed Networks

SP '02 Proceedings of the 2002 IEEE Symposium on Security and Privacy
Using Model Checking to Analyze Network Vulnerabilities

SP '00 Proceedings of the 2000 IEEE Symposium on Security and Privacy
Characteristics of internet background radiation

Proceedings of the 4th ACM SIGCOMM conference on Internet measurement
Operational experiences with high-volume network intrusion detection

Proceedings of the 11th ACM conference on Computer and communications security
A formal approach to sensor placement and configuration in a network intrusion detection system

Proceedings of the 2006 international workshop on Software engineering for secure systems
Scan Detection on Very Large Networks Using Logistic Regression Modeling

ISCC '06 Proceedings of the 11th IEEE Symposium on Computers and Communications
A scalable approach to attack graph generation

Proceedings of the 13th ACM conference on Computer and communications security
Practical Attack Graph Generation for Network Defense

ACSAC '06 Proceedings of the 22nd Annual Computer Security Applications Conference
Rethinking hardware support for network analysis and intrusion prevention

HOTSEC'06 Proceedings of the 1st USENIX Workshop on Hot Topics in Security
A brief history of scanning

Proceedings of the 7th ACM SIGCOMM conference on Internet measurement
Shunting: a hardware/software architecture for flexible, high-performance network intrusion prevention

Proceedings of the 14th ACM conference on Computer and communications security
Predicting the Resource Consumption of Network Intrusion Detection Systems

RAID '08 Proceedings of the 11th international symposium on Recent Advances in Intrusion Detection
Operator-Centric and Adaptive Intrusion Detection

IAS '08 Proceedings of the 2008 The Fourth International Conference on Information Assurance and Security
Honey@home: A New Approach to Large-Scale Threat Monitoring

WISTDCS '08 Proceedings of the 2008 WOMBAT Workshop on Information Security Threats Data Collection and Sharing
Optimal IDS Sensor Placement and Alert Prioritization Using Attack Graphs

Journal of Network and Systems Management
A Deployment Value Model for Intrusion Detection Sensors

ISA '09 Proceedings of the 3rd International Conference and Workshops on Advances in Information Security and Assurance
Ranking attack graphs

RAID'06 Proceedings of the 9th international conference on Recent Advances in Intrusion Detection

Intelligent network security assessment with modeling and analysis of attack patterns

Security and Communication Networks

Quantified Score

Hi-index	0.00

Visualization

Abstract

We raise some questions that need to be addressed to overcome the scalability challenges that intrusion detection systems face. We also take this opportunity to highlight some of the recent related work and put it in context.