Stateful intrusion detection in high-speed networks: A formalization and analysis of high-speed stateful signature matching for intrusion detection - Softcover

Foschini, Luca

 
9783639192452: Stateful intrusion detection in high-speed networks: A formalization and analysis of high-speed stateful signature matching for intrusion detection
Softcover
ISBN 10: 3639192451 ISBN 13: 9783639192452
Verlag: VDM Verlag, 2009

Inhaltsangabe

The present work is aimed to develop and analyze a novel model for distributed stateful intrusion detection able to scale in order to keep up with the pace of high speed network links. More precisely, in this work we make the following contributions: - We introduce a novel architecture for the distributed matching of stateful network-based signatures. - We present a novel algorithm that allows for the detection of complex, stateful attacks in a distributed fashion. - We provide a precise characterization of the bottlenecks that are inherent to the distributed matching of stateful signatures in the most general case. - We developed optimizing to reduce the impact of these bottlenecks and improve the performance of distributed detection. - We describe a working, yet demonstrative implementation of the system based on the Snort intrusion detection engine - We provide an evaluation of the implemented system on a real-world testbed

Die Inhaltsangabe kann sich auf eine andere Ausgabe dieses Titels beziehen.

Reseña del editor

The present work is aimed to develop and analyze a novel model for distributed stateful intrusion detection able to scale in order to keep up with the pace of high speed network links. More precisely, in this work we make the following contributions: - We introduce a novel architecture for the distributed matching of stateful network-based signatures. - We present a novel algorithm that allows for the detection of complex, stateful attacks in a distributed fashion. - We provide a precise characterization of the bottlenecks that are inherent to the distributed matching of stateful signatures in the most general case. - We developed optimizing to reduce the impact of these bottlenecks and improve the performance of distributed detection. - We describe a working, yet demonstrative implementation of the system based on the Snort intrusion detection engine - We provide an evaluation of the implemented system on a real-world testbed

Biografía del autor

Luca Foschini is a Ph.D. student at the University of California, Santa Barbara. His current research interests include data stream algorithms, computational geometry and dimensionality reduction. Luca Foschini received his B.S. and M.S. from the University of Pisa, as a pupil of the Sant'Anna School of Advanced Studies.

„Über diesen Titel“ kann sich auf eine andere Ausgabe dieses Titels beziehen.

Verlag
VDM Verlag
Erscheinungsdatum
2009
Sprache
Englisch
ISBN 10 
3639192451
ISBN 13 
9783639192452
Einband
Tapa blanda
Anzahl der Seiten
112
Kontakt zum Hersteller
Nicht verfügbar
Verantwortliche Person
Nicht verfügbar