Recent Advances in Intrusion Detection

9th International Symposium, RAID 2006, Hamburg, Germany, September 20-22, 2006, Proceedings
2006
ISBN: 978-3-540-39723-6
Verlag: Springer Berlin Heidelberg

Buch, Englisch, 331 Seiten, Format (B × H): 155 mm x 235 mm, Gewicht: 1080 g

Reihe: Information Systems and Applications, incl. Internet/Web, and HCI

This book constitutes the refereed proceedings of the 9th International Symposium on Recent Advances in Intrusion Detection, RAID 2006, held in Hamburg, Germany in September 2006. The 16 revised full papers presented were carefully reviewed and selected from 93 submissions. The papers are organized in topical sections on anomaly detection, attacks, system evaluation and threat assessment, malware collection and analysis, anomaly- and specification-based detection, and network intrusion detection.

Zielgruppe

Research

Autoren/Hrsg.

Kruegel, Christopher

Zamboni, Diego

Fachgebiete

• Mathematik | Informatik EDV | Informatik Informatik
• Mathematik | Informatik EDV | Informatik Technische Informatik Systemverwaltung & Management
• Mathematik | Informatik EDV | Informatik Daten / Datenbanken Informationstheorie, Kodierungstheorie
• Mathematik | Informatik EDV | Informatik Technische Informatik Netzwerk-Hardware
• Mathematik | Informatik EDV | Informatik Betriebssysteme Windows Betriebssysteme
• Mathematik | Informatik EDV | Informatik Technische Informatik Externe Speicher & Peripheriegeräte
• Mathematik | Informatik EDV | Informatik EDV & Informatik Allgemein Soziale und ethische Aspekte der EDV
• Interdisziplinäres Wissenschaften Wissenschaften: Forschung und Information Informationstheorie, Kodierungstheorie

Inhaltsverzeichnis

Recent Advances in Intrusion Detection.- A Framework for the Application of Association Rule Mining in Large Intrusion Detection Infrastructures.- Behavioral Distance Measurement Using Hidden Markov Models.- Automated Discovery of Mimicry Attacks.- Allergy Attack Against Automatic Signature Generation.- Paragraph: Thwarting Signature Learning by Training Maliciously.- Anomaly Detector Performance Evaluation Using a Parameterized Environment.- Ranking Attack Graphs.- Using Hidden Markov Models to Evaluate the Risks of Intrusions.- The Nepenthes Platform: An Efficient Approach to Collect Malware.- Automatic Handling of Protocol Dependencies and Reaction to 0-Day Attacks with ScriptGen Based Honeypots.- Fast and Evasive Attacks: Highlighting the Challenges Ahead.- Anagram: A Content Anomaly Detector Resistant to Mimicry Attack.- DEMEM: Distributed Evidence-Driven Message Exchange Intrusion Detection Model for MANET.- Enhancing Network Intrusion Detection with Integrated Sampling and Filtering.- WIND: Workload-Aware INtrusion Detection.- SafeCard: A Gigabit IPS on the Network Card.