Intrusion Detection: Winter 2011 (COMP 5900X) - Revision history

Soma at 04:57, 9 May 2011

2011-05-09T04:57:31Z

← Older revision		Revision as of 04:57, 9 May 2011
Line 1:		Line 1:
	=Readings=		=Readings=


	Note that many PDF links are via the Carleton University Library's proxy; to access these you need your Carleton ID number and library PIN. However, if you have trouble accessing them, try doing a search on the authors and titles; the same PDFs are generally also available from other websites. You may also want to look at the papers from my [http://homeostasis.scs.carleton.ca/~soma/id-2007w last run] of this class.		Note that many PDF links are via the Carleton University Library's proxy; to access these you need your Carleton ID number and library PIN. However, if you have trouble accessing them, try doing a search on the authors and titles; the same PDFs are generally also available from other websites. You may also want to look at the papers from my [http://homeostasis.scs.carleton.ca/~soma/id-2007w last run] of this class.

Soma: /* Readings */

2011-03-09T02:00:35Z

Readings

← Older revision		Revision as of 02:00, 9 March 2011
Line 36:		Line 36:
	* Ingham et al. (2007), Learning DFA representations of HTTP for protecting web applications		* Ingham et al. (2007), Learning DFA representations of HTTP for protecting web applications

	==March 14, 2011==		===March 14, 2011===

	* Lippmann et al. (2000), [http://www.springerlink.com/content/dt5g57v3m5u4698m/ Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation for Detecting Network Intruders in Real-Time.]		* Lippmann et al. (2000), [http://www.springerlink.com/content/dt5g57v3m5u4698m/ Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation for Detecting Network Intruders in Real-Time.]

Soma: /* March 14, 2011 */

2011-03-09T02:00:13Z

March 14, 2011

← Older revision		Revision as of 02:00, 9 March 2011
Line 38:		Line 38:
	==March 14, 2011==		==March 14, 2011==

	* Lippmann et al. (2000), [http://www.springerlink.com/content/dt5g57v3m5u4698m/ Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation for Detecting Network Intruders in Real-Time]		* Lippmann et al. (2000), [http://www.springerlink.com/content/dt5g57v3m5u4698m/ Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation for Detecting Network Intruders in Real-Time.]
	* McHugh (2000), [http://portal.acm.org/citation.cfm?id=382912.382923 Testing Intrusion Detection Systems: A Critique of the 1998 and 1999 DARPA Intrusion Detection System Evaluations as Performed by Lincoln Laboratory]		* McHugh (2000), [http://portal.acm.org/citation.cfm?id=382912.382923 Testing Intrusion Detection Systems: A Critique of the 1998 and 1999 DARPA Intrusion Detection System Evaluations as Performed by Lincoln Laboratory.]

	=Research=		=Research=

Soma: /* Readings */

2011-03-09T01:59:57Z

Readings

← Older revision		Revision as of 01:59, 9 March 2011
Line 27:		Line 27:
	===March 7, 2011===		===March 7, 2011===
	* Warrender et al. (1999), Detecting Intrusions Using System Calls: Alternative Data Models		* Warrender et al. (1999), Detecting Intrusions Using System Calls: Alternative Data Models
	* Lippmann et al. (2000), Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation for Detecting Network Intruders in Real-Time
	* McHugh (2000), Testing Intrusion Detection Systems: A Critique of the 1998 and 1999 DARPA Intrusion Detection System Evaluations as Performed by Lincoln Laboratory
	* Axelsson (2000), The Base-Rate Fallacy and the Difficulty of Intrusion Detection		* Axelsson (2000), The Base-Rate Fallacy and the Difficulty of Intrusion Detection
	* Lippmann et al. (2000), Evaluating Intrusion Detection Systems: The 1998 DARPA Off-line Intrusion Detection Evaluation		* Lippmann et al. (2000), Evaluating Intrusion Detection Systems: The 1998 DARPA Off-line Intrusion Detection Evaluation
Line 37:		Line 35:
	* Kirda et al. (2006), Behavior-based Spyware Detection		* Kirda et al. (2006), Behavior-based Spyware Detection
	* Ingham et al. (2007), Learning DFA representations of HTTP for protecting web applications		* Ingham et al. (2007), Learning DFA representations of HTTP for protecting web applications

			==March 14, 2011==

			* Lippmann et al. (2000), [http://www.springerlink.com/content/dt5g57v3m5u4698m/ Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation for Detecting Network Intruders in Real-Time]
			* McHugh (2000), [http://portal.acm.org/citation.cfm?id=382912.382923 Testing Intrusion Detection Systems: A Critique of the 1998 and 1999 DARPA Intrusion Detection System Evaluations as Performed by Lincoln Laboratory]

	=Research=		=Research=

Soma: /* March 7, 2011 */

2011-03-02T01:54:01Z

March 7, 2011

← Older revision		Revision as of 01:54, 2 March 2011
Line 27:		Line 27:
	===March 7, 2011===		===March 7, 2011===
	* Warrender et al. (1999), Detecting Intrusions Using System Calls: Alternative Data Models		* Warrender et al. (1999), Detecting Intrusions Using System Calls: Alternative Data Models
	* * Lippmann et al. (2000), Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation for Detecting Network Intruders in Real-Time		* Lippmann et al. (2000), Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation for Detecting Network Intruders in Real-Time
	* McHugh (2000), Testing Intrusion Detection Systems: A Critique of the 1998 and 1999 DARPA Intrusion Detection System Evaluations as Performed by Lincoln Laboratory		* McHugh (2000), Testing Intrusion Detection Systems: A Critique of the 1998 and 1999 DARPA Intrusion Detection System Evaluations as Performed by Lincoln Laboratory
	* Axelsson (2000), The Base-Rate Fallacy and the Difficulty of Intrusion Detection		* Axelsson (2000), The Base-Rate Fallacy and the Difficulty of Intrusion Detection

Soma: /* March 7, 2011 */

2011-03-02T01:53:49Z

March 7, 2011

Soma: /* Readings */

2011-03-02T01:52:58Z

Readings

@@ Line 24: / Line 24: @@
 ===February 14, 2011===
 *Inoue (2005), [http://www.cs.unm.edu/~forrest/dissertations-and-proposals/inoue-dissertation.pdf Anomaly Detection in Dynamic Execution Environments]
 =Research=

Soma: /* Research */

2011-02-16T14:49:40Z

Research

← Older revision		Revision as of 14:49, 16 February 2011
Line 27:		Line 27:
	=Research=		=Research=

	[CSET2011 IDS Paper HOWTO]		[[CSET2011 IDS Paper HOWTO]]

	==Android advertisement services==		==Android advertisement services==

Soma: /* Research */

2011-02-16T14:49:20Z

Research

← Older revision		Revision as of 14:49, 16 February 2011
Line 26:		Line 26:

	=Research=		=Research=

			[CSET2011 IDS Paper HOWTO]

	==Android advertisement services==		==Android advertisement services==

Soma: /* February 14, 2011 */

2011-02-14T13:48:46Z

February 14, 2011

← Older revision		Revision as of 13:48, 14 February 2011
Line 23:		Line 23:

	===February 14, 2011===		===February 14, 2011===
	*Inoue (~~1997~~), [http://www.cs.unm.edu/~forrest/dissertations-and-proposals/inoue-dissertation.pdf Anomaly Detection in Dynamic Execution Environments]		*Inoue (2005), [http://www.cs.unm.edu/~forrest/dissertations-and-proposals/inoue-dissertation.pdf Anomaly Detection in Dynamic Execution Environments]

	=Research=		=Research=

← Older revision		Revision as of 01:53, 2 March 2011
Line 26:		Line 26:

	===March 7, 2011===		===March 7, 2011===
	Warrender et al. (1999), Detecting Intrusions Using System Calls: Alternative Data Models		* Warrender et al. (1999), Detecting Intrusions Using System Calls: Alternative Data Models
	Lippmann et al. (2000), Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation for Detecting Network Intruders in Real-Time		* * Lippmann et al. (2000), Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation for Detecting Network Intruders in Real-Time
	McHugh (2000), Testing Intrusion Detection Systems: A Critique of the 1998 and 1999 DARPA Intrusion Detection System Evaluations as Performed by Lincoln Laboratory		* McHugh (2000), Testing Intrusion Detection Systems: A Critique of the 1998 and 1999 DARPA Intrusion Detection System Evaluations as Performed by Lincoln Laboratory
	Axelsson (2000), The Base-Rate Fallacy and the Difficulty of Intrusion Detection		* Axelsson (2000), The Base-Rate Fallacy and the Difficulty of Intrusion Detection
	Lippmann et al. (2000), Evaluating Intrusion Detection Systems: The 1998 DARPA Off-line ~~I ntrusion~~ Detection Evaluation		* Lippmann et al. (2000), Evaluating Intrusion Detection Systems: The 1998 DARPA Off-line Intrusion Detection Evaluation
	Sekar et al. (2001), A Fast Automaton-Based Method for Detecting Anomalous Program Behaviors		* Sekar et al. (2001), A Fast Automaton-Based Method for Detecting Anomalous Program Behaviors
	Mahoney & Chan (2003), An Analysis of the 1999 DARPA/Lincoln Laboratory Evaluation Data for Network Anomaly Detection		* Mahoney & Chan (2003), An Analysis of the 1999 DARPA/Lincoln Laboratory Evaluation Data for Network Anomaly Detection
	Kruegel et al. (2005), A multi-model approach to the detection of web-based attacks		* Kruegel et al. (2005), A multi-model approach to the detection of web-based attacks
	Wang et al. (2006), Anagram: A Content Anomaly Detector Resistant To Mimicry Attack		* Wang et al. (2006), Anagram: A Content Anomaly Detector Resistant To Mimicry Attack
	Kirda et al. (2006), Behavior-based Spyware Detection		* Kirda et al. (2006), Behavior-based Spyware Detection
	Ingham et al. (2007), Learning DFA representations of HTTP for protecting web applications		* Ingham et al. (2007), Learning DFA representations of HTTP for protecting web applications

	=Research=		=Research=