S. Ek and . Req, P=a, Ek-1.l 2 a et a ri Ek-1.Lp --t élimination de l'exigence

S. Ek and . Req, P=a, Ek-1.l 2 a et a E Ek-l.Lp --t motif trouvé

S. Ek, . Req, and . P=a, Ek-1.l < a et (a -Ek-1.l) ri Ek-1.Lq --t élimination de l'exigence

S. Ek, . Req, and . P=a, Ek-1.l < a et (a -Ek-1.l) E Ek-l.Lq --t élimination de l'exigence + création d'une nouvelle exigence dans la trace Ek-l : Ek-l·req

S. Ek and . Req, S=,6, Ek+l.1 ~ ,6 et ,6 E Ek+I.Ls --t motif trouvé

S. Ek·req, S=,6, Ek+l.1 < ,6 et (,6 -Ek+l.1) tt Ek+I.Lq --t élimination de l'exigence

S. Ek and . Req, S=,6, Ek+l.1 <,6 et (,6 -Ek+I.1) E Ek+I.Lq --t élimination de l'exigence + création d'une nouvelle exigence dans la trace Ek+l, Ek+l.req.S=, issue.1, p.6

S. Ek, . Req, and . Ps=, Ek-l.1 ~ a et a E Ek-1.Lp --t élimination de l'exigence + création d'une nouvelle exigence dans la trace Ek, Ek·req.S=, vol.6, issue.6

S. Ek, . Req, and . Ps=, Ek+l.1 ~ ,6 et ,6 E Ek+I.Ls --t élimination de l'exigence + création d'une nouvelle exigence dans la

E. Si, . Req, and . Ps=, Ek-l.1 < a et (a -Ek-l.l) tt Ek-1.Lq --t élimination de l'exigence

S. Ek, . Req, and . Ps=, E k + l .1 < ,6 et (,6 -E k + I .1) tt Ek+I·Lq --t élimination de l'exigence

E. Si, . Req, and . Ps=, E k -l .1 < a et (a -Ek-l.l) E Ek-I.Lq --t élimination de l'exigence + création d'une nouvelle exigence dans la trace Ek : (P 2 : Ek·req.S= ,6) 1\ Pl + création d'une nouvelle exigence dans la trace Ek-l : (Pl: Ek-l·req, pp.1-2

S. Ek, . Req, and . Ps=, E k + 1 .1 < ,6 et (,6 -E k +l.1) E Ek+I.Lq --t élimination de l'exigence + création d'une nouvelle exigence dans la trace trace Ek : (Pl : Ek.req.P= a) 1\ P 2 + création d'une nouvelle exigence dans la trace Ek+l, P2 : Ek+l·req.S= ,6 -Ek+l.l)

T. Abbes, A. Bouhoula, and M. Rusinowitch, On the fly pattern matching for intrusion detection with snort, Annales de Telecommunications, vol.59, pp.941-967, 2004.
URL : https://hal.archives-ouvertes.fr/inria-00100005

T. Abbes, A. Bouhoula, and M. Rusinowitch, Protocol analysis in intrusion detection using decision tree, International Conference on Information Technology: Coding and Computing, 2004. Proceedings. ITCC 2004., pp.404-408, 2004.
DOI : 10.1109/ITCC.2004.1286488

URL : https://hal.archives-ouvertes.fr/inria-00100006

T. Abbes and M. Rusinowitch, Fast multipattern matching for intrusion detection, EICAR 2004 Conference CD-rom: Best Paper Proceedings, 2004.
URL : https://hal.archives-ouvertes.fr/inria-00100007

T. Abbes, M. Rusinowitch, and A. Haloi, Network traffic classification for intrusion detection, 2004.
URL : https://hal.archives-ouvertes.fr/inria-00070766

A. Aho and M. Corasick, Efficient string matching: an aid to bibliographic search, Communications of the ACM, vol.18, issue.6, pp.333-340, 1975.
DOI : 10.1145/360825.360855

K. G. Anagnostakis, E. P. Markatos, S. Antonatos, and M. Polychronakis, E2xB: A domainspecific string matching algorithm for intrusion detection, Proceedings of the 18th IFIP International Information Security Conference (SEC2003), pp.217-228, 2003.

H. Anderson, Introduction to Nessus, 2003.

J. P. Anderson, Computer Security Threat Monitoring and Surveillance, 1980.

S. Antonatos, K. G. Anagnostakis, E. P. Markatos, and M. Polychronakis, Performance analysis of content matching intrusion detection systems, CCECE 2003, Canadian Conference on Electrical and Computer Engineering. Toward a Caring and Humane Technology (Cat. No.03CH37436), 2004.
DOI : 10.1109/SAINT.2004.1266118

S. Axelsson, Intrusion detection systems: A survey and taxonomy, 2000.

F. Baboescu and G. Varghese, Aggregated bit vector search algorithms for packet filter lookups, 2001.

R. Bace and P. Meil, Intrusion detection systems, Special Publication National Institute of Sta, vol.8000631, 2001.
DOI : 10.6028/NIST.SP.800-31

D. Barbara, J. Couto, S. Jajodia, and N. Wu, ADAM, ACM SIGMOD Record, vol.30, issue.4, pp.15-24, 2001.
DOI : 10.1145/604264.604268

D. Barbara, J. Couto, S. Jajodia, and N. Wu, ADAM, Proceedings of the IEEE SMC Information Assurance Workshop, pp.31-55, 1985.
DOI : 10.1145/604264.604268

R. S. Boyer and J. Strother-moore, A fast string searching algorithm, Communications of the ACM, vol.20, issue.10, pp.162-112, 1977.
DOI : 10.1145/359842.359859

A. Briney, CISO Strategies -Survey, Mars, 2003.

M. M. Buddhikot, S. Suri, and M. Waldvogel, Space Decomposition Techniques for Fast Layer-4 Switching, Proceedings of the IFIP TC6 WG6.1 fj WG6.4 / IEEE ComSoc TC on Gigabit Networking Sixth International Workshop on Protocols for High Speed Networks VI, pp.25-42, 2000.
DOI : 10.1145/285237.285282

URL : http://marcel.wanda.ch/Publications/buddhikot99space.pdf

C. Cachin, M. Dacier, O. Deak, K. Julisch, B. Randell et al., Towards a taxonomy of intrusion detection systems and attacks

C. Carver, Intrusion Response Systems -A Survey, 2000.

B. Caswell and M. Roesch, Snort rules database

C. Charras and T. Lecroq, Handbook of Exact String Matching Algorithms. King's College London, 2004.

G. Cheung and S. Mccanne, Optimal routing table design for IP address lookups under memory constraints, IEEE INFOCOM '99. Conference on Computer Communications. Proceedings. Eighteenth Annual Joint Conference of the IEEE Computer and Communications Societies. The Future is Now (Cat. No.99CH36320), pp.1437-1444, 1999.
DOI : 10.1109/INFCOM.1999.752164

S. Cho and S. Han, Two Sophisticated Techniques to Improve HMM-Based Intrusion Detection Systems, Proceedings of the 6th International Workshop on the Recent Advances in Intrusion Detection (RAID'2D03), LNCS v. 2820, pp.207-219, 2003.
DOI : 10.1007/978-3-540-45248-5_12

C. Coit, S. Staniford, and J. Mcalerney, Towards faster string matching for intrusion detection, Proc. of the DARPA Information Survivability Conference and Exhibition (DISCEX-02), pp.367-373, 2002.

B. Commentz-walter, A string matching algorithm fast on the average, Proceedings of the 6th Colloquium, on Automata, Languages and Programming, pp.118-132, 1979.
DOI : 10.1007/3-540-09510-1_10

M. Crochemore, A. Czumaj, L. G<}sieniec, T. Lecroq, T. Plandowski et al., Fast practical multi-pattern matching, Information Processing Letters, vol.71, issue.3-4, pp.3-4, 1999.
DOI : 10.1016/S0020-0190(99)00092-7

URL : https://hal.archives-ouvertes.fr/hal-00619554

M. Crochemore and W. Rytter, Text Algorithms, 1994.
URL : https://hal.archives-ouvertes.fr/hal-00619796

F. Cuppens, Cooperative intrusion detection In International Sysmposium on Information uperiority : tools for' crisis and confiict-management

F. Cuppens, S. Gombault, and T. Sans, Selecting appropriate counter-measures in an intrusion detection framework, Proceedings. 17th IEEE Computer Security Foundations Workshop, 2004., 2004.
DOI : 10.1109/CSFW.2004.1310733

D. Curry, H. Debar, and B. Feinstein, The intrusion detection message exchange format, IETF Intrusion Detection Working Group Internet Draft, 2004.

H. Debar, M. Becker, and D. Siboni, A Neural etwork Component for an Intrusion Detection System, Proceedings of the 1992 IEEE Computer Society Symposium on Reserach in Security and Privacy, pp.240-250, 1992.

H. Debar, M. Dacier, and A. Wespi, Towards a taxonomy of intrusion-detection systems, Computer Networks, vol.31, issue.8, pp.805-822, 1999.
DOI : 10.1016/S1389-1286(98)00017-6

H. Debar, M. Dacier, and A. Wespi, A revised taxonomy for intrusion-detection systems, Annales des Télécommunications, vol.55, issue.78, pp.361-378, 2000.

H. Debar, L. Mé, and S. F. Wu, Recent Advances in Intrusion Detection, Proceedings, volume 1907 of Lecture Notes in Computer Science, 2000.
DOI : 10.1007/3-540-39945-3

M. Degermark, A. Brodnik, S. Carlsson, and S. Pink, Small forwarding tables for fast routing lookups, SIGCOMM, pp.3-14, 1997.

D. E. Denning, An Intrusion-Detection Model, In IEEE Trans. on Software Engg, vol.13, pp.222-232, 1987.

N. Desai, Increasing performance in high-speed NIDS, a look at snort's internals, 2002.

. Dethy, Examining port scan methods -Analysing audible techniques

S. T. Eckmann, G. Vigna, and R. A. Kemmerer, STATL: An attack language for state-based intrusion detection, Journal of Computer Security, vol.10, issue.1-2, pp.71-103, 2002.
DOI : 10.3233/JCS-2002-101-204

S. T. Eckmann, Translating Snort rules to STATL scenarios, Proceedings of the 4th International Workshop on the Recent Advances in Intrusion Detection (RAID '2001), L CS v. 2212, pp.69-84, 2001.

R. Elz and R. Bush, RFC 2181 : Clarifications to the DNS specification, 1997.

M. Erlinger and S. Staniford-chen, Intrusion Detection Exchange Format (IDWG)

H. Welte, The netfilterjiptables project

B. Feinstein, G. Matthews, and J. White, The intrusion detection exchange protocol (idxp), Octobre, IETF Intrusion Detection Working Group Internet Draft, 2002.

A. Feldmann and S. Muthukrishnan, Tradeoffs for packet classification, Proceedings IEEE INFOCOM 2000. Conference on Computer Communications. Nineteenth Annual Joint Conference of the IEEE Computer and Communications Societies (Cat. No.00CH37064), pp.1193-1202, 2000.
DOI : 10.1109/INFCOM.2000.832493

M. Fisk and G. Varghese, Fast content-based packet handling for intrusion detection, 2001.
DOI : 10.21236/ADA406413

URL : http://www.dtic.mil/dtic/tr/fulltext/u2/a406413.pdf

S. Forrest, S. A. Hofmeyr, A. Somayaji, and T. A. Longstaff, A sense of self for Unix processes, Proceedings 1996 IEEE Symposium on Security and Privacy, p.120, 1996.
DOI : 10.1109/SECPRI.1996.502675

5. S. Forrest, A. S. Perelson, L. Allen, and R. Cherukuri, Self-nonself discrimination in a computer, Proceedings of 1994 IEEE Computer Society Symposium on Research in Security and Privacy, p.202, 1994.
DOI : 10.1109/RISP.1994.296580

5. J. Foster, Realsecure 7.0. iss matures its ids into an enterprise-class, best of breed solution, 2002.

5. N. Foukia, G. Di-marzo, and . Serugendo, Self-organizing architecture for intrusion detection and response systems, Proceedings of HP-OVUA 2003 Workshop, 2003.

K. L. Fox, R. R. Henning, J. H. Reed, and R. Simonian, A eural Network Approach Towards Intrusion Detection, Proceedings of the 13th National Computer Security Confer-ence, pp.125-134, 1990.

5. T. Garvey and T. F. Lunt, Model based Intrusion Detection, Proceedings of the 14th National Computer Security Conference, pp.372-385, 1991.

5. A. Ghosh, A. Schwartzbard, and M. Schatz, Learning program behavior profiles for intrusion detection, Proceedings of the Workshop on Intrusion Detection and Networ-k Monitoring, pp.51-62, 1999.

6. R. Graham, Faq : Network intrusion detection systems. Version 0, 2000.

6. R. Graham, Evolution of ids URL: http :jjwww.robertgraham.comjslidesj0304- evolution-of-ids. ppt, 2002.

6. P. Gupta and N. Mckeown, Packet classification on multiple fields, Proceedings of the conference on Applications, technologies, architectures, and protocols for computer communication, pp.147-160, 1999.
DOI : 10.1145/316188.316217

URL : http://www-2.cs.cmu.edu/~srini/15-744/readings/GM99.pdf

6. P. Gupta and N. Mckeown, Packet classification using hierarchical intelligent cuttings, Proceedings Hot Interconneets VII, Stanford, pp.147-160, 1999.

6. P. Gupta and N. Mckeown, Algorithms for packet classification, IEEE Network, vol.15, issue.2, pp.24-32, 2001.
DOI : 10.1109/65.912717

6. N. Habra, B. Le-charlier, M. Mathien, and . Abdelaziz, ASAX: Software architecture and rule-based language for universal audit trail analysis, Proceedings of the Second European Symposium on Research in Computer Security (ESORICS 92), L CS v. 648, pp.435-450, 1992.
DOI : 10.1007/BFb0013912

M. Handley, V. Paxson, and C. Kreibich, Network intrusion detection : Evasion, traffic normalization, and end-to-end protocol semantics, Proc. of the 10th USENIX Security Symposium, 2001.

6. A. Harrison, Cyberassaults hit buy.com, ebay, cnn and amazon, Computerworld company, 2000.

6. S. Hofmeyr, S. Forrest, and A. Somayaji, Intrusion detection using sequences of system calls, Journal of Computer Security, vol.10, issue.1, pp.151-180, 1998.
DOI : 10.1016/0167-4048(93)90110-Q

R. Horspool, Practical fast searching in strings. Software -Practice & Experience, pp.501-506, 1980.

7. I. Charitakis, E. Kanagnostakis, and . Markatos, An active traffic splitter architecture for intrusion detection, 11th IEEE/ACM International Symposium on Modeling, Analysis and Simulation of Computer Telecommunications Systems, 2003. MASCOTS 2003., pp.238-241, 2003.
DOI : 10.1109/MASCOT.2003.1240665

K. Ilgun, USTAT: a real-time intrusion detection system for UNIX, Proceedings 1993 IEEE Computer Society Symposium on Research in Security and Privacy, 1993.
DOI : 10.1109/RISP.1993.287646

K. Ilgun, R. Kemmerer, and P. A. Porras, State Transition Analysis : A Rule-Based Intrusion Detection System, IEEE Transactions on Software Engineering, vol.21, issue.3, 1995.
DOI : 10.1109/32.372146

R. Jagannathan, T. Lunt, D. Anderson, C. Dodd, F. Gilham et al., System Design Document : Next-Generation Intrusion Detection Expert System (NIDES), A008/ A009/ A011/A012/ A014, SRI International, 1993.

J. Justen, Nessus 2.0.8. Technical report, Network and Systems Professionals Association Inc., ovembre, 2003.

D. E. Knuth, J. H. Morris, and V. Pratt, Fast Pattern Matching in Strings, SIAM Journal on Computing, vol.6, issue.2, pp.323-350, 1977.
DOI : 10.1137/0206024

C. Ko, Logic induction of valid behavior specifications for intrusion detection, Proceeding 2000 IEEE Symposium on Security and Privacy. S&P 2000, p.142, 2000.
DOI : 10.1109/SECPRI.2000.848452

C. Ko, G. Fink, and K. Levitt, Automated detection of vulnerabilities in privileged programs by execution monitoring, Tenth Annual Computer Security Applications Conference, pp.134-144, 1994.
DOI : 10.1109/CSAC.1994.367313

A. P. Kosoresow and S. A. Hofmeyr, Intrusion detection via system call traces, IEEE Software, vol.14, issue.5, pp.35-42, 1997.
DOI : 10.1109/52.605929

URL : http://ise.gmu.edu/~xwangc/teaching/ISA674/IDS-Reading/IEEESoftware97-IDThroughSystemCallTrace.pdf

J. Koziol, Snort 2. Number ISBN: 2-7440-1624-1. CampusPress, 2003.

C. Kruegel and T. Toth, Automatic rule clustering for improved, signature-based intrusion detection, 2002.

C. Kruegel and T. Toth, Using Decision Trees to Improve Signature-Based Intrusion Detection, Proceedings of the 6th International Workshop on the Recent Advances in Intrusion Detection (RAID'2003), L CS v. 2820, pp.173-191, 2003.
DOI : 10.1007/978-3-540-45248-5_10

C. Kruegel, F. Valeur, G. Vigna, and R. Kemmerer, Stateful Intrusion Detection for High-Speed etworks, Proceedings of the IEEE Symposium on Research on Security and Privacy, 2002.

G. Kucherov and M. Rusinowitch, Matching a set of strings with variable length don't cares, Theoretical Computer Science, vol.178, issue.1-2, pp.129-154, 1997.
DOI : 10.1016/S0304-3975(97)88195-9

S. Kumar, A Pattern Matching Approach to Misuse Intrusion Detection, 1995.

S. Kumar and E. H. Spafford, A Pattern Matching Model for Misuse Intrusion Detection, Proceedings of the 17th National Computer Security Conference, pp.11-21, 1994.

J. Kuri, G. Navarro, L. Mé, and L. Heye, A Pattern Matching Based Filter for Audit Reduction and Fast Detection of Potential Intrusions, Proceedings of the 3rd International Workshop on the Recent Advances in Intrusion Detection (RAID'2000), LNCS v, pp.17-21, 1907.
DOI : 10.1007/3-540-39945-3_2

]. J. Kuri, G. Navarro, and L. Mé, Fast multipattern search algorithms for intrusion detection, Proceedings Seventh International Symposium on String Processing and Information Retrieval. SPIRE 2000, pp.23-49, 2003.
DOI : 10.1109/SPIRE.2000.878193

T. V. Lakshman and D. Stiliadis, High-speed policy-based packet forwarding using efficient multi-dimensional range matching, PTOceedings of ACM SIGCOMM '98, pp.203-214, 1998.
DOI : 10.1145/285243.285283

URL : http://www.dmi.ens.fr/~mistral/paperlak6.ps

B. Lampson, V. Srinivasan, and G. Varghese, IP lookups using multiway and multicolumn search, IEEE/ACM Transactions on Networking, vol.7, issue.3, pp.324-334, 1999.
DOI : 10.1109/90.779199

URL : http://www.cs.ucsd.edu/~varghese/PAPERS/ToN99.pdf

T. Lane and C. Brodley, An application of machine learning to anomaly detection, PTOceedings of the 20th NIST-NCSC National Information Systems Security Conference, pp.366-380, 1997.

D. B. Lange, Java Aglet Application Programming Interface (J-AAPI), 1997.

T. Lecroq, A variation on the Boyer-Moore algorithm, Theoretical Computer Science, vol.92, issue.1, pp.119-144, 1992.
DOI : 10.1016/0304-3975(92)90139-7

W. Lee, K. Nimbalkar, S. Yee, P. Patil, T. Desai et al., A Data Mining and CIDF Based Approach for Detecting Novel and Distributed Intrusions, Proceedings of the 3rd International Workshop on the Recent Advances in Intrusion Detection (RAID '2000), LNCS v, pp.49-65, 1907.
DOI : 10.1007/3-540-39945-3_4

URL : http://www.csc.ncsu.edu/faculty/lee/papers/lee_raid_00.ps

W. Lee and S. J. Stolfo, A framework for constructing features and models for intrusion detection systems, ACM Transactions on Information and System Security, vol.3, issue.4, pp.227-261, 2000.
DOI : 10.1145/382912.382914

URL : http://www.cs.unc.edu/~jeffay/courses/nidsS05/mining/lee_dmids_frmwk.pdf

W. Lee, S. J. Stolfo, and K. W. Mok, Mining in a data-fiow environment : experience in network intrusion detection, Proceedings of the fifth ACM SIGKDD international confeTence on Knowledge discovery and data mining, pp.114-124, 1999.

W. Lee, S. J. Stolfo, and K. W. Mok, Algorithms for Mining System Audit Data, pp.166-189, 2002.
DOI : 10.1007/978-3-7908-1791-1_8

W. Lee, S. J. Stolfo, and K. Mok, A data mining framework for building intrusion detection models, PTOceedings of the 1999 IEEE Symposium on SecuTity and PTivacy, 1999.

W. Lee and D. Xiang, Information-theoretic measures for anomaly detection, Proceedings of the IEEE Symposium on SecuTity and Privacy, p.130

P. Lichodzijewski and A. , Zincir-Heywood, and M. 1. Heywood. Host-based intrusion detection using self-organizing maps, The IEEE World Congress on Computational Intelligence, International Joint Conference on Neural Networks, 2002.

R. Lippmann, S. Webster, and D. Stetson, The Effect of Identifying Vulnerabilities and Patching Software on the Utility of Network Intrusion Detection, Proceedings of the 5th International Workshop on the Recent Advances in Intrusion Detection (RAID '2002), LNCS v. 2516, pp.307-326, 2002.
DOI : 10.1007/3-540-36084-0_17

R. Lippmann, D. Fried, J. Graf, . Haines, D. Kendall et al., Evaluating intrusion detection systems: the 1998 DARPA off-line intrusion detection evaluation, Proceedings DARPA Information Survivability Conference and Exposition. DISCEX'00, pp.12-26, 2000.
DOI : 10.1109/DISCEX.2000.821506

T. Lunt, A survey of intrusion detection techniques, Computers & Security, vol.12, issue.4, pp.405-418, 1993.
DOI : 10.1016/0167-4048(93)90029-5

T. F. Lunt and R. Jagannathan, A prototype real-time intrusion-detection expert system, Proceedings. 1988 IEEE Symposium on Security and Privacy, pp.59-66, 1988.
DOI : 10.1109/SECPRI.1988.8098

T. F. Lunt, R. Jagannathan, R. Lee, S. Listgarten, D. L. Edwards et al., Development and Application of IDES : A Real-Time Intrusion- Detection Expert System, 1988.

T. F. Lunt, R. Jagannathan, R. Lee, S. Listgarten, D. L. Edwards et al., IDES: The Enhanced Prototype, 1988.

T. F. Lunt, R. Jagannathan, R. Lee, A. Whitehurst, and S. Listgarten, Knowledge-based intrusion detection, [1989] Proceedings. The Annual AI Systems in Government Conference, 1989.
DOI : 10.1109/AISIG.1989.47311

L. Mé, Gassata, a genetic algorithm as an alternative tool for security audit analysis, Proceedings of the lst International Workshop on the Recent Advances in Intrusion Detection Septembre, 1998.

L. Mé, Z. Marrakchi, C. Michel, H. Debar, and F. Cuppens, La détection d'intrusions: les outils doivent coopérer, 2001.

C. Marceau, Characterizing the behavior of a program using multiple-length -grams, Proceedings of the 2000 workshop on New security paradigms, pp.101-110, 2000.

E. P. Markatos, S. Antonatos, M. Polychronakis, and K. D. Anagnostakis, Exclusion-based signature matching for intrusion detection, Proceedings of IASTED International Conference on Communications and Computer Networks, pp.146-151, 2002.

. Nomad-mobile and . Center, The hack faq

J. H. Morris and V. R. Pratt, A linear pattern-matching algorithm, 1970.

D. R. Morrison, PATRICIA---Practical Algorithm To Retrieve Information Coded in Alphanumeric, Journal of the ACM, vol.15, issue.4, pp.514-534, 1968.
DOI : 10.1145/321479.321481

. Mycert, Security tools : Scanner

J. Nathan and B. Caswell, 100Mb IDS Tapping Diagram (with 1000bt span port)

J. and B. Caswell, 100Mb IDS Tapping Diagram (with only 100bt span port)

P. G. Neumann and P. A. Porras, Experience with emerald to date, Proceedings of the Workshop on Intrusion Detection and Network Monitoring, pp.73-80, 1999.

S. Nilsson and G. Karlsson, IP-address lookup using LC-tries, IEEE Journal on Selected Areas in Communications, vol.17, issue.6, pp.1083-1092, 1999.
DOI : 10.1109/49.772439

URL : http://www.nada.kth.se/~snilsson/public/papers/router2/text.ps

1. M. Norton and D. Roelker, Hi-performance multi-rule inspection engine, 2004.

M. Torton and D. Roelker, Snort? 2.0 rule optimizer, 2004.

S. 126j-uansri, T. S. Singh, and . Dillon, A pro cess state-transition analysis and its application to intrusion detection, Proceedings of the 15th Annual Computer Security Applications Conference, p.378, 1999.

1. A. Zincir-heywood, P. Lichodzijewski, and M. 1. Heywood, Dynamic intrusion detection using self-organizing maps, The 14th Annual Canadian Information Technology Security Symposium (CITSS), 2002.

1. V. Paxson, BI'o : a system for detecting network intruders in real-time, Comput. Networks, pp.23-242435, 1999.

1. M. Peters, Construction and use of a passive ethernet tap, 2004.

1. P. Porras and A. Valdes, Live traffic analysis of tcp/ip gateways, Internet Society Symposium on Network and Distributed System Security, 1998.

P. A. Porras, STAT -A State Transition Analysis Tool for Intrusion Detection, 1992.

T. H. Ptacek and T. T. Newsham, Insertion, evasion, and denial of service: Eluding network intrusion detection, pp.2-6, 1998.

R. F. Puppy, A look at whisker's anti-ids tactics, 1999.

J. R. Quinlan, Induction of decision trees, Readings in Machine Learning, pp.81-106, 1986.
DOI : 10.1037/13135-000

M. Ramadas, S. Ostermann, and B. Tjaden, Detecting anomalous network traffic with selforganizing maps, Proceedings of the 6th International Workshop on the Recent Advances in Intrusion Detection (RAID '2003), LNCS v. 2820, pp.36-54, 2003.

M. Roesch, Snort : Lightweight intrusion detection for networks, Proceedings of the 13th Conference on Systems Administration SE IX Association, pp.229-238, 1999.

M. Roesch and C. Green, Snort Users Manual Snort Release : 2.0.1. Snort Documentation, 2003.

M. Roger and J. Goubault-larrecq, Log auditing through model-checking, Proceedings. 14th IEEE Computer Security Foundations Workshop, 2001., pp.220-236, 2001.
DOI : 10.1109/CSFW.2001.930148

D. Rovniagin, A. Woolsanchez, E. Biersack, and W. Dabbous, The geometric efficient matching algorithm for firewalls Survey and taxonomy of IP address lookup algorithms, IEEE Network Magazine, vol.140, pp.8-23, 2001.

J. Ryan and R. Miikkulainen, Intrusion detection with neural networks, Advances in Neural Information Processing Systems, pp.943-949, 1998.

G. Savchuk and S. Egorov, Fidelis NCA Platform's Packet Capture (DirectWire) Fidelis Security System Inc, 2003.

F. B. Schneider, Trust in Cyberspace, 1999.

M. Sebring, E. Shellhouse, M. Hanna, and R. Whitehurst, Expert Systems in Intrusion Detection: A Case Study, Proceedings of the 11th National Computer Security Conference, 1988.

R. Sekar, S. Guang, T. Verma, and . Shanbhag, A high-performance network intrusion detection system, Proceedings of the 6th ACM conference on Computer and communications security , CCS '99, pp.8-17, 1999.
DOI : 10.1145/319709.319712

P. Selleres, On the Theory and Computation of Evolutionary Distances, SIAM Journal on Applied Mathematics, vol.26, issue.4, pp.359-373, 1980.
DOI : 10.1137/0126070

U. Shankar and V. Paxson, Active mapping: resisting NIDS evasion without altering traffic, Proceedings 19th International Conference on Data Engineering (Cat. No.03CH37405), p.44, 2003.
DOI : 10.1109/SECPRI.2003.1199327

K. Sklower, A tree-based packet routing table for berkeley unix, USENIX Winter Conference, 1991.

K. Sklower, A tree-based routing table for berkeley unix, Proceedings of the 1991 Winter Usenix Conference, pp.93-99, 1991.

S. E. Smaha, Haystack: an intrusion detection system, [Proceedings 1988] Fourth Aerospace Computer Security Applications, pp.37-44, 1988.
DOI : 10.1109/ACSAC.1988.113412

R. Sommer and V. Paxson, Enhancing byte-level network intrusion detection signatures with context, Proceedings of the 10th ACM conference on Computer and communication security , CCS '03, pp.262-271, 2003.
DOI : 10.1145/948109.948145

URL : http://www.cs.ubc.ca/~malam/papers/IntrusionDetection/Sommer - Enhancing Byte-Level Network Intrusion Detection Signature with Context acm.pdf

. Sourcefire, Snort? 2.0 rule optimizer

R. Spangler, Packet sniffer detection with antisniff, 2003.

L. Spitzner, Know your enemy : III, 2000.

L. Spitzner, Honeypots: catching the insider threat, 19th Annual Computer Security Applications Conference, 2003. Proceedings., p.170, 2003.
DOI : 10.1109/CSAC.2003.1254322

R. Srinivasan, RFC 1831 : RPC : Remote procedure call protocol specification version 2, 1995.
DOI : 10.17487/rfc1831

R. Srinivasan, RFC 1832 : XDR: External data representation standard, aout 1995, Status : DRAFT STANDARD
DOI : 10.17487/rfc1832

R. Srinivasan, RFC 1833 : Binding protocols for ONC RPC version 2, aout 1995, Status : PROPOSED STANDARD

V. Srinivasan, S. Suri, and G. Varghese, Packet classification using tuple space search, SIGCOMM, pp.135-146, 1999.

V. Srinivasan and G. Varghese, Fast address lookups using controlled prefix expansion, ACM Transactions on Computer Systems, vol.17, issue.1, pp.1-40, 1999.
DOI : 10.1145/296502.296503

URL : http://www.cs.ucsd.edu/~varghese/PAPERS/TOCS99.pdf

V. Srinivasan, G. Varghese, S. Suri, and M. Waldvogel, Fast and scalable layer four switching, Proceedings of ACM SIGCOMM '98, pp.191-202, 1998.
DOI : 10.1145/285243.285282

URL : http://marcel.wanda.ch/Publications/srinivasan98fast.pdf

S. Staniford-chen, S. Cheung, R. Crawford, M. Dilger, J. Frank et al., Grids -a graph-based intrusion detection system for large networks, The 19th National Information Systems Security Conference, 1996.

S. Staniford-chen, B. Thng, and D. Schnackenberg, The cornmon intrusion detection framework (cidf), Information Survivability Workshop

S. Stolfo, W. Fan, W. Lee, A. Prodromidis, and P. Chan, Cost-based modeling for fraud and instrusion detection : Results from the jam project, Proceedings of DARPA Information Survivability Conference and Exposition, 2000.

A. Sundaram, An introduction to intrusion detection, Crossroads, vol.2, issue.4, pp.3-7, 1996.
DOI : 10.1145/332159.332161

G. Taleck, Ambiguity Resolution via Passive OS Fingerprinting, Proceedings of the 6th International Workshop on the Recent Advances in Intrusion Detection (RAID '2003), L CS v. 2820, pp.192-206, 2003.
DOI : 10.1007/978-3-540-45248-5_11

K. Tan, The application of neural networks to UNIX computer security, Proceedings of ICNN'95, International Conference on Neural Networks, 1995.
DOI : 10.1109/ICNN.1995.488223

H. S. Teng, K. Chen, and S. Lu, Security audit trail analysis using inductively generated predictive rules, Sixth Conference on Artificial Intelligence for Applications, pp.24-29, 1990.
DOI : 10.1109/CAIA.1990.89167

T. Toth, Improving Intrusion Detection Systems, 2003.

Z. Trabelsi, H. Rahmani, K. Kaouech, and M. Frikha, Malicious sniffing systems detection platform, CCECE 2003, Canadian Conference on Electrical and Computer Engineering. Toward a Caring and Humane Technology (Cat. No.03CH37436), pp.201-207, 2004.
DOI : 10.1109/SAINT.2004.1266117

URL : http://www.cse.scu.edu/~tschwarz/COEN152_06/Lectures/01266117.pdf

P. F. Tsuchiya, A search algorithm for table entries with non-contiguous wildcarding, 1991.

N. Tuck, T. Sherwood, B. Calder, and G. Varghese, Deterministic memory-efficient string matching algorithms for intrusion detection, IEEE INFOCOM 2004, 2004.
DOI : 10.1109/INFCOM.2004.1354682

URL : http://www.cs.ucsd.edu/users/calder/papers/INFOCOM-04-IDS.pdf

P. Uppuluri and R. Sekar, Experiences with Specification-Based Intrusion Detection, Proceedings of the 4th International Workshop on the Recent Advances in Intrusion Detection (RAID'2001), LNCS v. 2212, pp.172-189, 2001.
DOI : 10.1007/3-540-45474-8_11

URL : http://seclab.cs.sunysb.edu/sekar/papers/raid01.ps

F. Veysset, O. Coutay, and O. Heen, ew tool and technique for remote operating system fingerprinting, 2002.

G. Vigna and R. Kemmerer, NetSTAT: a network-based intrusion detection approach, Proceedings 14th Annual Computer Security Applications Conference (Cat. No.98EX217), 1998.
DOI : 10.1109/CSAC.1998.738566

G. Vigna and R. A. Kemmerer, NetSTAT: A network-based intrusion detection system, Journal of Computer Security, vol.7, issue.1, pp.37-71, 1999.
DOI : 10.3233/JCS-1999-7103

M. Waldvogel, G. Varghese, J. Turner, and B. Plattner, Scalable high speed IP routing lookups, Proceedings of SIGCOMM '97, pp.25-36, 1997.
DOI : 10.1145/263109.263136

URL : http://www-cse.ucsd.edu/users/varghese/PAPERS/lookupssig97.ps.Z

C. Warrender, S. Forrest, and B. Pearlmutter, Detecting intrusions using system caUs: Alternative data models, Proceedings of the IEEE Symposium on Security and Privacy, pp.133-145, 1999.
DOI : 10.1109/secpri.1999.766910

URL : http://eprints.maynoothuniversity.ie/1418/1/DetectingIntrusions.pdf

A. Wespi, M. Dacier, and H. Debar, Intrusion Detection Using Variable-Length Audit Trail Patterns, Proceedings of the 3rd International Workshop on the Recent Advances in Intrusion Detection (RAID'2000), LNCS v, pp.110-129, 1907.
DOI : 10.1007/3-540-39945-3_8

T. Woo, A modular approach to packet classification: algorithms and results, Proceedings IEEE INFOCOM 2000. Conference on Computer Communications. Nineteenth Annual Joint Conference of the IEEE Computer and Communications Societies (Cat. No.00CH37064), pp.1213-1222, 2000.
DOI : 10.1109/INFCOM.2000.832499

M. Wood and M. Erlinger, Intrusion detection message exchange requirements, Octobre 2002. IETF Intrusion Detection Working Group Internet Draft
DOI : 10.17487/rfc4766

S. Wu and U. Manber, A fast algorithm for multi-pattern searching, 1994.