P=a, Ek-1.l 2 a et a ri Ek-1.Lp --t élimination de l'exigence ,
P=a, Ek-1.l 2 a et a E Ek-l.Lp --t motif trouvé ,
Ek-1.l < a et (a -Ek-1.l) ri Ek-1.Lq --t élimination de l'exigence ,
Ek-1.l < a et (a -Ek-1.l) E Ek-l.Lq --t élimination de l'exigence + création d'une nouvelle exigence dans la trace Ek-l : Ek-l·req ,
S=,6, Ek+l.1 ~ ,6 et ,6 E Ek+I.Ls --t motif trouvé ,
S=,6, Ek+l.1 < ,6 et (,6 -Ek+l.1) tt Ek+I.Lq --t élimination de l'exigence ,
S=,6, Ek+l.1 <,6 et (,6 -Ek+I.1) E Ek+I.Lq --t élimination de l'exigence + création d'une nouvelle exigence dans la trace Ek+l, Ek+l.req.S=, issue.1, p.6 ,
Ek-l.1 ~ a et a E Ek-1.Lp --t élimination de l'exigence + création d'une nouvelle exigence dans la trace Ek, Ek·req.S=, vol.6, issue.6 ,
Ek+l.1 ~ ,6 et ,6 E Ek+I.Ls --t élimination de l'exigence + création d'une nouvelle exigence dans la ,
Ek-l.1 < a et (a -Ek-l.l) tt Ek-1.Lq --t élimination de l'exigence ,
E k + l .1 < ,6 et (,6 -E k + I .1) tt Ek+I·Lq --t élimination de l'exigence ,
E k -l .1 < a et (a -Ek-l.l) E Ek-I.Lq --t élimination de l'exigence + création d'une nouvelle exigence dans la trace Ek : (P 2 : Ek·req.S= ,6) 1\ Pl + création d'une nouvelle exigence dans la trace Ek-l : (Pl: Ek-l·req, pp.1-2 ,
E k + 1 .1 < ,6 et (,6 -E k +l.1) E Ek+I.Lq --t élimination de l'exigence + création d'une nouvelle exigence dans la trace trace Ek : (Pl : Ek.req.P= a) 1\ P 2 + création d'une nouvelle exigence dans la trace Ek+l, P2 : Ek+l·req.S= ,6 -Ek+l.l) ,
On the fly pattern matching for intrusion detection with snort, Annales de Telecommunications, vol.59, pp.941-967, 2004. ,
URL : https://hal.archives-ouvertes.fr/inria-00100005
Protocol analysis in intrusion detection using decision tree, International Conference on Information Technology: Coding and Computing, 2004. Proceedings. ITCC 2004., pp.404-408, 2004. ,
DOI : 10.1109/ITCC.2004.1286488
URL : https://hal.archives-ouvertes.fr/inria-00100006
Fast multipattern matching for intrusion detection, EICAR 2004 Conference CD-rom: Best Paper Proceedings, 2004. ,
URL : https://hal.archives-ouvertes.fr/inria-00100007
Network traffic classification for intrusion detection, 2004. ,
URL : https://hal.archives-ouvertes.fr/inria-00070766
Efficient string matching: an aid to bibliographic search, Communications of the ACM, vol.18, issue.6, pp.333-340, 1975. ,
DOI : 10.1145/360825.360855
E2xB: A domainspecific string matching algorithm for intrusion detection, Proceedings of the 18th IFIP International Information Security Conference (SEC2003), pp.217-228, 2003. ,
Introduction to Nessus, 2003. ,
Computer Security Threat Monitoring and Surveillance, 1980. ,
Performance analysis of content matching intrusion detection systems, CCECE 2003, Canadian Conference on Electrical and Computer Engineering. Toward a Caring and Humane Technology (Cat. No.03CH37436), 2004. ,
DOI : 10.1109/SAINT.2004.1266118
Intrusion detection systems: A survey and taxonomy, 2000. ,
Aggregated bit vector search algorithms for packet filter lookups, 2001. ,
Intrusion detection systems, Special Publication National Institute of Sta, vol.8000631, 2001. ,
DOI : 10.6028/NIST.SP.800-31
ADAM, ACM SIGMOD Record, vol.30, issue.4, pp.15-24, 2001. ,
DOI : 10.1145/604264.604268
ADAM, Proceedings of the IEEE SMC Information Assurance Workshop, pp.31-55, 1985. ,
DOI : 10.1145/604264.604268
A fast string searching algorithm, Communications of the ACM, vol.20, issue.10, pp.162-112, 1977. ,
DOI : 10.1145/359842.359859
CISO Strategies -Survey, Mars, 2003. ,
Space Decomposition Techniques for Fast Layer-4 Switching, Proceedings of the IFIP TC6 WG6.1 fj WG6.4 / IEEE ComSoc TC on Gigabit Networking Sixth International Workshop on Protocols for High Speed Networks VI, pp.25-42, 2000. ,
DOI : 10.1145/285237.285282
URL : http://marcel.wanda.ch/Publications/buddhikot99space.pdf
Towards a taxonomy of intrusion detection systems and attacks ,
Intrusion Response Systems -A Survey, 2000. ,
Snort rules database ,
Handbook of Exact String Matching Algorithms. King's College London, 2004. ,
Optimal routing table design for IP address lookups under memory constraints, IEEE INFOCOM '99. Conference on Computer Communications. Proceedings. Eighteenth Annual Joint Conference of the IEEE Computer and Communications Societies. The Future is Now (Cat. No.99CH36320), pp.1437-1444, 1999. ,
DOI : 10.1109/INFCOM.1999.752164
Two Sophisticated Techniques to Improve HMM-Based Intrusion Detection Systems, Proceedings of the 6th International Workshop on the Recent Advances in Intrusion Detection (RAID'2D03), LNCS v. 2820, pp.207-219, 2003. ,
DOI : 10.1007/978-3-540-45248-5_12
Towards faster string matching for intrusion detection, Proc. of the DARPA Information Survivability Conference and Exhibition (DISCEX-02), pp.367-373, 2002. ,
A string matching algorithm fast on the average, Proceedings of the 6th Colloquium, on Automata, Languages and Programming, pp.118-132, 1979. ,
DOI : 10.1007/3-540-09510-1_10
Fast practical multi-pattern matching, Information Processing Letters, vol.71, issue.3-4, pp.3-4, 1999. ,
DOI : 10.1016/S0020-0190(99)00092-7
URL : https://hal.archives-ouvertes.fr/hal-00619554
Text Algorithms, 1994. ,
URL : https://hal.archives-ouvertes.fr/hal-00619796
Cooperative intrusion detection In International Sysmposium on Information uperiority : tools for' crisis and confiict-management ,
Selecting appropriate counter-measures in an intrusion detection framework, Proceedings. 17th IEEE Computer Security Foundations Workshop, 2004., 2004. ,
DOI : 10.1109/CSFW.2004.1310733
The intrusion detection message exchange format, IETF Intrusion Detection Working Group Internet Draft, 2004. ,
A Neural etwork Component for an Intrusion Detection System, Proceedings of the 1992 IEEE Computer Society Symposium on Reserach in Security and Privacy, pp.240-250, 1992. ,
Towards a taxonomy of intrusion-detection systems, Computer Networks, vol.31, issue.8, pp.805-822, 1999. ,
DOI : 10.1016/S1389-1286(98)00017-6
A revised taxonomy for intrusion-detection systems, Annales des Télécommunications, vol.55, issue.78, pp.361-378, 2000. ,
Recent Advances in Intrusion Detection, Proceedings, volume 1907 of Lecture Notes in Computer Science, 2000. ,
DOI : 10.1007/3-540-39945-3
Small forwarding tables for fast routing lookups, SIGCOMM, pp.3-14, 1997. ,
An Intrusion-Detection Model, In IEEE Trans. on Software Engg, vol.13, pp.222-232, 1987. ,
Increasing performance in high-speed NIDS, a look at snort's internals, 2002. ,
Examining port scan methods -Analysing audible techniques ,
STATL: An attack language for state-based intrusion detection, Journal of Computer Security, vol.10, issue.1-2, pp.71-103, 2002. ,
DOI : 10.3233/JCS-2002-101-204
Translating Snort rules to STATL scenarios, Proceedings of the 4th International Workshop on the Recent Advances in Intrusion Detection (RAID '2001), L CS v. 2212, pp.69-84, 2001. ,
RFC 2181 : Clarifications to the DNS specification, 1997. ,
Intrusion Detection Exchange Format (IDWG) ,
The netfilterjiptables project ,
The intrusion detection exchange protocol (idxp), Octobre, IETF Intrusion Detection Working Group Internet Draft, 2002. ,
Tradeoffs for packet classification, Proceedings IEEE INFOCOM 2000. Conference on Computer Communications. Nineteenth Annual Joint Conference of the IEEE Computer and Communications Societies (Cat. No.00CH37064), pp.1193-1202, 2000. ,
DOI : 10.1109/INFCOM.2000.832493
Fast content-based packet handling for intrusion detection, 2001. ,
DOI : 10.21236/ADA406413
URL : http://www.dtic.mil/dtic/tr/fulltext/u2/a406413.pdf
A sense of self for Unix processes, Proceedings 1996 IEEE Symposium on Security and Privacy, p.120, 1996. ,
DOI : 10.1109/SECPRI.1996.502675
Self-nonself discrimination in a computer, Proceedings of 1994 IEEE Computer Society Symposium on Research in Security and Privacy, p.202, 1994. ,
DOI : 10.1109/RISP.1994.296580
Realsecure 7.0. iss matures its ids into an enterprise-class, best of breed solution, 2002. ,
Self-organizing architecture for intrusion detection and response systems, Proceedings of HP-OVUA 2003 Workshop, 2003. ,
A eural Network Approach Towards Intrusion Detection, Proceedings of the 13th National Computer Security Confer-ence, pp.125-134, 1990. ,
Model based Intrusion Detection, Proceedings of the 14th National Computer Security Conference, pp.372-385, 1991. ,
Learning program behavior profiles for intrusion detection, Proceedings of the Workshop on Intrusion Detection and Networ-k Monitoring, pp.51-62, 1999. ,
Faq : Network intrusion detection systems. Version 0, 2000. ,
Evolution of ids URL: http :jjwww.robertgraham.comjslidesj0304- evolution-of-ids. ppt, 2002. ,
Packet classification on multiple fields, Proceedings of the conference on Applications, technologies, architectures, and protocols for computer communication, pp.147-160, 1999. ,
DOI : 10.1145/316188.316217
URL : http://www-2.cs.cmu.edu/~srini/15-744/readings/GM99.pdf
Packet classification using hierarchical intelligent cuttings, Proceedings Hot Interconneets VII, Stanford, pp.147-160, 1999. ,
Algorithms for packet classification, IEEE Network, vol.15, issue.2, pp.24-32, 2001. ,
DOI : 10.1109/65.912717
ASAX: Software architecture and rule-based language for universal audit trail analysis, Proceedings of the Second European Symposium on Research in Computer Security (ESORICS 92), L CS v. 648, pp.435-450, 1992. ,
DOI : 10.1007/BFb0013912
Network intrusion detection : Evasion, traffic normalization, and end-to-end protocol semantics, Proc. of the 10th USENIX Security Symposium, 2001. ,
Cyberassaults hit buy.com, ebay, cnn and amazon, Computerworld company, 2000. ,
Intrusion detection using sequences of system calls, Journal of Computer Security, vol.10, issue.1, pp.151-180, 1998. ,
DOI : 10.1016/0167-4048(93)90110-Q
Practical fast searching in strings. Software -Practice & Experience, pp.501-506, 1980. ,
An active traffic splitter architecture for intrusion detection, 11th IEEE/ACM International Symposium on Modeling, Analysis and Simulation of Computer Telecommunications Systems, 2003. MASCOTS 2003., pp.238-241, 2003. ,
DOI : 10.1109/MASCOT.2003.1240665
USTAT: a real-time intrusion detection system for UNIX, Proceedings 1993 IEEE Computer Society Symposium on Research in Security and Privacy, 1993. ,
DOI : 10.1109/RISP.1993.287646
State Transition Analysis : A Rule-Based Intrusion Detection System, IEEE Transactions on Software Engineering, vol.21, issue.3, 1995. ,
DOI : 10.1109/32.372146
System Design Document : Next-Generation Intrusion Detection Expert System (NIDES), A008/ A009/ A011/A012/ A014, SRI International, 1993. ,
Nessus 2.0.8. Technical report, Network and Systems Professionals Association Inc., ovembre, 2003. ,
Fast Pattern Matching in Strings, SIAM Journal on Computing, vol.6, issue.2, pp.323-350, 1977. ,
DOI : 10.1137/0206024
Logic induction of valid behavior specifications for intrusion detection, Proceeding 2000 IEEE Symposium on Security and Privacy. S&P 2000, p.142, 2000. ,
DOI : 10.1109/SECPRI.2000.848452
Automated detection of vulnerabilities in privileged programs by execution monitoring, Tenth Annual Computer Security Applications Conference, pp.134-144, 1994. ,
DOI : 10.1109/CSAC.1994.367313
Intrusion detection via system call traces, IEEE Software, vol.14, issue.5, pp.35-42, 1997. ,
DOI : 10.1109/52.605929
URL : http://ise.gmu.edu/~xwangc/teaching/ISA674/IDS-Reading/IEEESoftware97-IDThroughSystemCallTrace.pdf
Snort 2. Number ISBN: 2-7440-1624-1. CampusPress, 2003. ,
Automatic rule clustering for improved, signature-based intrusion detection, 2002. ,
Using Decision Trees to Improve Signature-Based Intrusion Detection, Proceedings of the 6th International Workshop on the Recent Advances in Intrusion Detection (RAID'2003), L CS v. 2820, pp.173-191, 2003. ,
DOI : 10.1007/978-3-540-45248-5_10
Stateful Intrusion Detection for High-Speed etworks, Proceedings of the IEEE Symposium on Research on Security and Privacy, 2002. ,
Matching a set of strings with variable length don't cares, Theoretical Computer Science, vol.178, issue.1-2, pp.129-154, 1997. ,
DOI : 10.1016/S0304-3975(97)88195-9
A Pattern Matching Approach to Misuse Intrusion Detection, 1995. ,
A Pattern Matching Model for Misuse Intrusion Detection, Proceedings of the 17th National Computer Security Conference, pp.11-21, 1994. ,
A Pattern Matching Based Filter for Audit Reduction and Fast Detection of Potential Intrusions, Proceedings of the 3rd International Workshop on the Recent Advances in Intrusion Detection (RAID'2000), LNCS v, pp.17-21, 1907. ,
DOI : 10.1007/3-540-39945-3_2
Fast multipattern search algorithms for intrusion detection, Proceedings Seventh International Symposium on String Processing and Information Retrieval. SPIRE 2000, pp.23-49, 2003. ,
DOI : 10.1109/SPIRE.2000.878193
High-speed policy-based packet forwarding using efficient multi-dimensional range matching, PTOceedings of ACM SIGCOMM '98, pp.203-214, 1998. ,
DOI : 10.1145/285243.285283
URL : http://www.dmi.ens.fr/~mistral/paperlak6.ps
IP lookups using multiway and multicolumn search, IEEE/ACM Transactions on Networking, vol.7, issue.3, pp.324-334, 1999. ,
DOI : 10.1109/90.779199
URL : http://www.cs.ucsd.edu/~varghese/PAPERS/ToN99.pdf
An application of machine learning to anomaly detection, PTOceedings of the 20th NIST-NCSC National Information Systems Security Conference, pp.366-380, 1997. ,
Java Aglet Application Programming Interface (J-AAPI), 1997. ,
A variation on the Boyer-Moore algorithm, Theoretical Computer Science, vol.92, issue.1, pp.119-144, 1992. ,
DOI : 10.1016/0304-3975(92)90139-7
A Data Mining and CIDF Based Approach for Detecting Novel and Distributed Intrusions, Proceedings of the 3rd International Workshop on the Recent Advances in Intrusion Detection (RAID '2000), LNCS v, pp.49-65, 1907. ,
DOI : 10.1007/3-540-39945-3_4
URL : http://www.csc.ncsu.edu/faculty/lee/papers/lee_raid_00.ps
A framework for constructing features and models for intrusion detection systems, ACM Transactions on Information and System Security, vol.3, issue.4, pp.227-261, 2000. ,
DOI : 10.1145/382912.382914
URL : http://www.cs.unc.edu/~jeffay/courses/nidsS05/mining/lee_dmids_frmwk.pdf
Mining in a data-fiow environment : experience in network intrusion detection, Proceedings of the fifth ACM SIGKDD international confeTence on Knowledge discovery and data mining, pp.114-124, 1999. ,
Algorithms for Mining System Audit Data, pp.166-189, 2002. ,
DOI : 10.1007/978-3-7908-1791-1_8
A data mining framework for building intrusion detection models, PTOceedings of the 1999 IEEE Symposium on SecuTity and PTivacy, 1999. ,
Information-theoretic measures for anomaly detection, Proceedings of the IEEE Symposium on SecuTity and Privacy, p.130 ,
Zincir-Heywood, and M. 1. Heywood. Host-based intrusion detection using self-organizing maps, The IEEE World Congress on Computational Intelligence, International Joint Conference on Neural Networks, 2002. ,
The Effect of Identifying Vulnerabilities and Patching Software on the Utility of Network Intrusion Detection, Proceedings of the 5th International Workshop on the Recent Advances in Intrusion Detection (RAID '2002), LNCS v. 2516, pp.307-326, 2002. ,
DOI : 10.1007/3-540-36084-0_17
Evaluating intrusion detection systems: the 1998 DARPA off-line intrusion detection evaluation, Proceedings DARPA Information Survivability Conference and Exposition. DISCEX'00, pp.12-26, 2000. ,
DOI : 10.1109/DISCEX.2000.821506
A survey of intrusion detection techniques, Computers & Security, vol.12, issue.4, pp.405-418, 1993. ,
DOI : 10.1016/0167-4048(93)90029-5
A prototype real-time intrusion-detection expert system, Proceedings. 1988 IEEE Symposium on Security and Privacy, pp.59-66, 1988. ,
DOI : 10.1109/SECPRI.1988.8098
Development and Application of IDES : A Real-Time Intrusion- Detection Expert System, 1988. ,
IDES: The Enhanced Prototype, 1988. ,
Knowledge-based intrusion detection, [1989] Proceedings. The Annual AI Systems in Government Conference, 1989. ,
DOI : 10.1109/AISIG.1989.47311
Gassata, a genetic algorithm as an alternative tool for security audit analysis, Proceedings of the lst International Workshop on the Recent Advances in Intrusion Detection Septembre, 1998. ,
La détection d'intrusions: les outils doivent coopérer, 2001. ,
Characterizing the behavior of a program using multiple-length -grams, Proceedings of the 2000 workshop on New security paradigms, pp.101-110, 2000. ,
Exclusion-based signature matching for intrusion detection, Proceedings of IASTED International Conference on Communications and Computer Networks, pp.146-151, 2002. ,
The hack faq ,
A linear pattern-matching algorithm, 1970. ,
PATRICIA---Practical Algorithm To Retrieve Information Coded in Alphanumeric, Journal of the ACM, vol.15, issue.4, pp.514-534, 1968. ,
DOI : 10.1145/321479.321481
Security tools : Scanner ,
100Mb IDS Tapping Diagram (with 1000bt span port) ,
100Mb IDS Tapping Diagram (with only 100bt span port) ,
Experience with emerald to date, Proceedings of the Workshop on Intrusion Detection and Network Monitoring, pp.73-80, 1999. ,
IP-address lookup using LC-tries, IEEE Journal on Selected Areas in Communications, vol.17, issue.6, pp.1083-1092, 1999. ,
DOI : 10.1109/49.772439
URL : http://www.nada.kth.se/~snilsson/public/papers/router2/text.ps
Hi-performance multi-rule inspection engine, 2004. ,
Snort? 2.0 rule optimizer, 2004. ,
A pro cess state-transition analysis and its application to intrusion detection, Proceedings of the 15th Annual Computer Security Applications Conference, p.378, 1999. ,
Dynamic intrusion detection using self-organizing maps, The 14th Annual Canadian Information Technology Security Symposium (CITSS), 2002. ,
BI'o : a system for detecting network intruders in real-time, Comput. Networks, pp.23-242435, 1999. ,
Construction and use of a passive ethernet tap, 2004. ,
Live traffic analysis of tcp/ip gateways, Internet Society Symposium on Network and Distributed System Security, 1998. ,
STAT -A State Transition Analysis Tool for Intrusion Detection, 1992. ,
Insertion, evasion, and denial of service: Eluding network intrusion detection, pp.2-6, 1998. ,
A look at whisker's anti-ids tactics, 1999. ,
Induction of decision trees, Readings in Machine Learning, pp.81-106, 1986. ,
DOI : 10.1037/13135-000
Detecting anomalous network traffic with selforganizing maps, Proceedings of the 6th International Workshop on the Recent Advances in Intrusion Detection (RAID '2003), LNCS v. 2820, pp.36-54, 2003. ,
Snort : Lightweight intrusion detection for networks, Proceedings of the 13th Conference on Systems Administration SE IX Association, pp.229-238, 1999. ,
Snort Users Manual Snort Release : 2.0.1. Snort Documentation, 2003. ,
Log auditing through model-checking, Proceedings. 14th IEEE Computer Security Foundations Workshop, 2001., pp.220-236, 2001. ,
DOI : 10.1109/CSFW.2001.930148
The geometric efficient matching algorithm for firewalls Survey and taxonomy of IP address lookup algorithms, IEEE Network Magazine, vol.140, pp.8-23, 2001. ,
Intrusion detection with neural networks, Advances in Neural Information Processing Systems, pp.943-949, 1998. ,
Fidelis NCA Platform's Packet Capture (DirectWire) Fidelis Security System Inc, 2003. ,
Trust in Cyberspace, 1999. ,
Expert Systems in Intrusion Detection: A Case Study, Proceedings of the 11th National Computer Security Conference, 1988. ,
A high-performance network intrusion detection system, Proceedings of the 6th ACM conference on Computer and communications security , CCS '99, pp.8-17, 1999. ,
DOI : 10.1145/319709.319712
On the Theory and Computation of Evolutionary Distances, SIAM Journal on Applied Mathematics, vol.26, issue.4, pp.359-373, 1980. ,
DOI : 10.1137/0126070
Active mapping: resisting NIDS evasion without altering traffic, Proceedings 19th International Conference on Data Engineering (Cat. No.03CH37405), p.44, 2003. ,
DOI : 10.1109/SECPRI.2003.1199327
A tree-based packet routing table for berkeley unix, USENIX Winter Conference, 1991. ,
A tree-based routing table for berkeley unix, Proceedings of the 1991 Winter Usenix Conference, pp.93-99, 1991. ,
Haystack: an intrusion detection system, [Proceedings 1988] Fourth Aerospace Computer Security Applications, pp.37-44, 1988. ,
DOI : 10.1109/ACSAC.1988.113412
Enhancing byte-level network intrusion detection signatures with context, Proceedings of the 10th ACM conference on Computer and communication security , CCS '03, pp.262-271, 2003. ,
DOI : 10.1145/948109.948145
URL : http://www.cs.ubc.ca/~malam/papers/IntrusionDetection/Sommer - Enhancing Byte-Level Network Intrusion Detection Signature with Context acm.pdf
Snort? 2.0 rule optimizer ,
Packet sniffer detection with antisniff, 2003. ,
Know your enemy : III, 2000. ,
Honeypots: catching the insider threat, 19th Annual Computer Security Applications Conference, 2003. Proceedings., p.170, 2003. ,
DOI : 10.1109/CSAC.2003.1254322
RFC 1831 : RPC : Remote procedure call protocol specification version 2, 1995. ,
DOI : 10.17487/rfc1831
RFC 1832 : XDR: External data representation standard, aout 1995, Status : DRAFT STANDARD ,
DOI : 10.17487/rfc1832
RFC 1833 : Binding protocols for ONC RPC version 2, aout 1995, Status : PROPOSED STANDARD ,
Packet classification using tuple space search, SIGCOMM, pp.135-146, 1999. ,
Fast address lookups using controlled prefix expansion, ACM Transactions on Computer Systems, vol.17, issue.1, pp.1-40, 1999. ,
DOI : 10.1145/296502.296503
URL : http://www.cs.ucsd.edu/~varghese/PAPERS/TOCS99.pdf
Fast and scalable layer four switching, Proceedings of ACM SIGCOMM '98, pp.191-202, 1998. ,
DOI : 10.1145/285243.285282
URL : http://marcel.wanda.ch/Publications/srinivasan98fast.pdf
Grids -a graph-based intrusion detection system for large networks, The 19th National Information Systems Security Conference, 1996. ,
The cornmon intrusion detection framework (cidf), Information Survivability Workshop ,
Cost-based modeling for fraud and instrusion detection : Results from the jam project, Proceedings of DARPA Information Survivability Conference and Exposition, 2000. ,
An introduction to intrusion detection, Crossroads, vol.2, issue.4, pp.3-7, 1996. ,
DOI : 10.1145/332159.332161
Ambiguity Resolution via Passive OS Fingerprinting, Proceedings of the 6th International Workshop on the Recent Advances in Intrusion Detection (RAID '2003), L CS v. 2820, pp.192-206, 2003. ,
DOI : 10.1007/978-3-540-45248-5_11
The application of neural networks to UNIX computer security, Proceedings of ICNN'95, International Conference on Neural Networks, 1995. ,
DOI : 10.1109/ICNN.1995.488223
Security audit trail analysis using inductively generated predictive rules, Sixth Conference on Artificial Intelligence for Applications, pp.24-29, 1990. ,
DOI : 10.1109/CAIA.1990.89167
Improving Intrusion Detection Systems, 2003. ,
Malicious sniffing systems detection platform, CCECE 2003, Canadian Conference on Electrical and Computer Engineering. Toward a Caring and Humane Technology (Cat. No.03CH37436), pp.201-207, 2004. ,
DOI : 10.1109/SAINT.2004.1266117
URL : http://www.cse.scu.edu/~tschwarz/COEN152_06/Lectures/01266117.pdf
A search algorithm for table entries with non-contiguous wildcarding, 1991. ,
Deterministic memory-efficient string matching algorithms for intrusion detection, IEEE INFOCOM 2004, 2004. ,
DOI : 10.1109/INFCOM.2004.1354682
URL : http://www.cs.ucsd.edu/users/calder/papers/INFOCOM-04-IDS.pdf
Experiences with Specification-Based Intrusion Detection, Proceedings of the 4th International Workshop on the Recent Advances in Intrusion Detection (RAID'2001), LNCS v. 2212, pp.172-189, 2001. ,
DOI : 10.1007/3-540-45474-8_11
URL : http://seclab.cs.sunysb.edu/sekar/papers/raid01.ps
ew tool and technique for remote operating system fingerprinting, 2002. ,
NetSTAT: a network-based intrusion detection approach, Proceedings 14th Annual Computer Security Applications Conference (Cat. No.98EX217), 1998. ,
DOI : 10.1109/CSAC.1998.738566
NetSTAT: A network-based intrusion detection system, Journal of Computer Security, vol.7, issue.1, pp.37-71, 1999. ,
DOI : 10.3233/JCS-1999-7103
Scalable high speed IP routing lookups, Proceedings of SIGCOMM '97, pp.25-36, 1997. ,
DOI : 10.1145/263109.263136
URL : http://www-cse.ucsd.edu/users/varghese/PAPERS/lookupssig97.ps.Z
Detecting intrusions using system caUs: Alternative data models, Proceedings of the IEEE Symposium on Security and Privacy, pp.133-145, 1999. ,
DOI : 10.1109/secpri.1999.766910
URL : http://eprints.maynoothuniversity.ie/1418/1/DetectingIntrusions.pdf
Intrusion Detection Using Variable-Length Audit Trail Patterns, Proceedings of the 3rd International Workshop on the Recent Advances in Intrusion Detection (RAID'2000), LNCS v, pp.110-129, 1907. ,
DOI : 10.1007/3-540-39945-3_8
A modular approach to packet classification: algorithms and results, Proceedings IEEE INFOCOM 2000. Conference on Computer Communications. Nineteenth Annual Joint Conference of the IEEE Computer and Communications Societies (Cat. No.00CH37064), pp.1213-1222, 2000. ,
DOI : 10.1109/INFCOM.2000.832499
Intrusion detection message exchange requirements, Octobre 2002. IETF Intrusion Detection Working Group Internet Draft ,
DOI : 10.17487/rfc4766
A fast algorithm for multi-pattern searching, 1994. ,