This paper presents a taxonomy of intrusion detection systems that is then used to survey
and classify a number of research prototypes. The taxonomy consists of a classification first …

Intrusions pose a serious security threat in a network environment, and therefore need to be
promptly detected and dealt with. New intrusion types, of which detection systems may not …

Many different demands can be made of intrusion detection systems. An important
requirement is that an intrusion detection system be effective; that is, it should detect a …

Intrusion detection (ID) is an important component of infrastructure protection mechanisms.
Intrusion detection systems (IDSs) need to be accurate, adaptive, and extensible. Given …

Anomaly detection is an essential component of protection mechanisms against novel
attacks. We propose to use several information-theoretic measures, namely, entropy …

Anomaly detection on system call sequences has become perhaps the most successful
approach for detecting novel intrusions. A natural way for learning sequences is to use a …

Inference methods for detecting attacks on information resources typically use signature
analysis or statistical anomaly detection methods. The former have the advantage of attack …

Automated intrusion response is an important unsolved problem in computer security. A
system called pH (for process homeostasis) is described which can successfully detect and …

In practice, most computer intrusions begin by misusing programs in clever ways to obtain
unauthorized higher levels of privilege. One effective way to detect intrusive activity before …

The authors describe a method for intrusion detection applied to real time database systems.
The novel idea pursued in this study is to exploit the real time properties of data in intrusion …