Network anomaly detection is an important and dynamic research area. Many network
intrusion detection methods and systems (NIDS) have been proposed in the literature. In this …

As advances in networking technology help to connect the distant corners of the globe and
as the Internet continues to expand its influence as a medium for communications and …

A model of a real-time intrusion-detection expert system capable of detecting break-ins,
penetrations, and other forms of computer abuse is described. The model is based on the …

The Internet and computer networks are exposed to an increasing number of security
threats. With new types of attacks appearing continually, developing flexible and adaptive …

In recent years, network traffic data have become larger and more complex, leading to
higher possibilities of network intrusion. Traditional intrusion detection methods face …

Intrusion-detection systems aim at detecting attacks against computer systems and
networks, or against information systems in general, as it is difficult to provide provably …

Many different demands can be made of intrusion detection systems. An important
requirement is that an intrusion detection system be effective; that is, it should detect a …

The paper presents a new approach to representing and detecting computer penetrations in
real time. The approach, called state transition analysis, models penetrations as a series of …

With the rapid rise in the ubiquity and sophistication of Internet technology and the
accompanying growth in the number of network attacks, network intrusion detection has …

The EMERALD (Event Monitori ng Enabli ng Responses to Anomal ous Li ve Di sturbances)
envi ronment isa di stri buted scal abl e tool sui te for tracki ng mal i ci ous acti vi tythrough …