Recent Advances in Intrusion Detection: 5th International Symposium, Raid 2002, Zurich, Switzerland, October 16-18,2002 : Proceedings

by Wespi, Andreas; Vigna, Giovanni; Deri, Luca; Deri, Luca; Raid 200 (2002 Zurich, Switzerland); Vigna, Giovanni

• ISBN13: 9783540000204
• ISBN10: 3540000208
• Format: Paperback
• Copyright: 2002-11-01
• Publisher: Springer Verlag

Summary

This book constitutes the refereed proceedings of the 5th International Symposium on Recent Advances in Intrusion Detection, RAID 2002, held in Zurich, Switzerland, in October 2002. The 16 revised full papers presented were carefully reviewed and selected from a total of 81 submissions. The papers are organized in topical sections on stepping stone detection, anomality detection, correlation, legal aspects and intrusion tolerance, assessment of intrusion detection systems, adaptive intrusion detection systems, intrusion detection analysis.

Table of Contents

Detecting Long Connection Chains of Interactive Terminal Sessions	p. 1
Multiscale Stepping-Stone Detection: Detecting Pairs of Jittered Interactive Streams by Exploiting Maximum Tolerable Delay	p. 17
Detecting Malicious Software by Monitoring Anomalous Windows Registry Accesses	p. 36
Undermining an Anomaly-Based Intrusion Detection System Using Common Exploits	p. 54
Analyzing Intensive Intrusion Alerts via Correlation	p. 74
A Mission-Impact-Based Approach to INFOSEC Alarm Correlation	p. 95
M2D2: A Formal Data Model for IDS Alert Correlation	p. 115
Development of a Legal Framework for Intrusion Detection	p. 138
Learning Unknown Attacks - A Start	p. 158
Evaluation of the Diagnostic Capabilities of Commercial Intrusion Detection Systems	p. 177
A Stochastic Model for Intrusions	p. 199
Attacks against Computer Network: Formal Grammar-Based Framework and Simulation Tool	p. 219
Capacity Verification for High Speed Network Intrusion Detection Systems	p. 239
Performance Adaptation in Real-Time Intrusion Detection Systems	p. 252
Accurate Buffer Overflow Detection via Abstract Payload Execution	p. 274
Introducing Reference Flow Control for Detecting Intrusion Symptoms at the OS Level	p. 292
The Effect of Identifying Vulnerabilities and Patching Software on the Utility of Network Intrusion Detection	p. 307
Author Index	p. 327
Table of Contents provided by Blackwell. All Rights Reserved.