anomaly detection method

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Agent-Based Network Intrusion Detection System

The paper presents security platform based on agents as an efficient and robust solution for high-performance intrusion detection system designed for deployment on high-speed network links. The proposed detection algorithm is based on extension of trust modeling techniques with representation of uncertain identities, context representation and implicit assumption that significant...

Tags: Network Intrusion Detection System, Network, Agent, Intrusion Detection System, Detection Algorithm, Anomaly Detection Method, Real Estate, Intrusion Detection, Security, Business Operations

White papers 2007-08-17

Additional Resources

Rule-Based Anomaly Detection on IP Flows

Rule-based packet classification is a powerful method for identifying traffic anomalies, with network security as a key application area. While popular systems like Snort are used in many network locations, comprehensive deployment across Tier-1 service provider networks is costly due to the need for high-speed monitors at many network ingress...

Tags: Network, IP, Intellectual Property, Networking, Research & Development, Business Operations

White papers 2009-01-20

Flow Based Network Intrusion Detection System Using Hardware-Accelerated NetFlow Probes

Current network intrusion detection methods based on anomaly detection approaches suffer from comparatively higher error rate and low performance. Proposed flow based network intrusion detection system addresses these issues by using hardware-accelerated probes to collect unsampled NetFlow data from gigabit-speed network links and combining several anomaly detection algorithms by means...

Tags: Network Intrusion Detection System, Network, Intrusion Detection System, Network Intrusion Detection, CESNET, Anomaly Data, Intrusion Detection, Networking, Security

White papers 2008-09-30

Anomaly Intrusion Detection System Using Hierarchical Gaussian Mixture Model

Intrusion Detection Systems have been widely used to overcome security threats in computer networks and to identify unauthorized use, misuse, and abuse of computer systems. Anomaly-based approaches in Intrusion Detection Systems have the advantage of being able to detect unknown attacks; they look for patterns that deviate from the normal...

Tags: Intrusion Detection System, Anomaly, Iran Telecommunication Research Center, Intrusion Detection, Network Security, Security, Networking

White papers 2008-08-01

Boosting Web Intrusion Detection Systems by Inferring Positive Signatures

This paper presents a new approach to anomaly-based network intrusion detection for web applications. This approach is based on dividing the input parameters of the monitored web application in two groups: the "Regular" and the "Irregular" ones, and applying a new method for anomaly detection on the "Regular" ones based...

Tags: Web, Web Application, Training, Anomaly, University Of Twente, Intrusion Detection, Cloud Computing, Workforce Management, Training And Certification, Security, Human Resources

White papers 2008-06-15

Detecting the Blue Pill Hypervisor rootkit is possible but not trivial

There has been much skepticism over the claim that Blue Pill the first effective Hypervisor rootkit is 100% undetectable and I myself was very skeptical of Blue Pill when I first read about it. I had an extensive email conversation with Joanna Rutkowska (of Singapore-based COSEINC) weeks before her...

Tags: Blue Pill, Blue

Blog posts 2006-08-17

Kernel Density Estimation for an Anomaly Based Intrusion Detection System

This paper presents a new nonparametric method to simulate probability density functions of some random variables raised in characterizing an Anomaly Based Intrusion Detection System ABIDS. A group of kernel density estimators is constructed and the criterions for bandwidth selection are discussed. In addition, statistical parameters of these distributions are...

Tags: Ohio University, Intrusion Detection System, Research & Development, Intrusion Detection, Network Security, Security, Business Operations, Networking

White papers 2006-04-09