Computer System Intrusion Detection: A Survey

作者: Robert S. Sielken , Anita K. Jones

DOI:

关键词:

摘要: The ability to detect intruders in computer systems increases importance as computers are increasingly integrated into the that we rely on for correct functioning of society. This paper reviews history research intrusion detection performed software context operating a single computer, distributed system, or network computers. There two basic approaches: anomaly and misuse detection. Both have been practiced since 1980s. naturally scaled use networks.

参考文章(27)
Debra Anderson, Thane Frivold, Alfonso Valdes, Next-generation Intrusion Detection Expert System (NIDES)A Summary ,(1997)
G.E. Liepens, H.S. Vaccaro, Intrusion detection: Its role and validation Computers & Security. ,vol. 11, pp. 347- 355 ,(1992) , 10.1016/0167-4048(92)90175-Q
Eugene H. Spafford, Daniel Farmer, The COPS Security Checker System USENIX Summer. pp. 165- 170 ,(1990)
Rune Skardhamar, Virus: Detection and Elimination ,(1995)
Stephen E. Smaha, Terrance L. Goan, James Brentano, Daniel M. Teal, Karl N. Levitt, Biswanath Mukherjee, Steven R. Snapp, L. Todd Heberlein, Gihan V. Dias, Tim Grance, Che-Lin Ho, Doug Mansur, DIDS (distributed intrusion detection system)—motivation, architecture, and an early prototype Internet besieged. pp. 211- 227 ,(1997)
Douglas Lee Schales, David R. Safford, David K. Hess, The TAMU security package: an ongoing response to internet intruders in an academic environment usenix security symposium. pp. 3- ,(1993)
Richard A. Kemmerer, NSTAT: A Model-based Real-time Network Intrusion Detection System University of California at Santa Barbara. ,(1998)
T.F. Lunt, R. Jagannathan, R. Lee, A. Whitehurst, S. Listgarten, Knowledge-based intrusion detection [1989] Proceedings. The Annual AI Systems in Government Conference. pp. 102- 107 ,(1989) , 10.1109/AISIG.1989.47311
Steven A. Hofmeyr, Stephanie Forrest, Anil Somayaji, Intrusion detection using sequences of system calls Journal of Computer Security. ,vol. 6, pp. 151- 180 ,(1998) , 10.3233/JCS-980109