Recent Advances in Intrusion Detection: Third International Workshop, Raid 2000, Toulouse, France, October 2-4, 2000 : Proceedings

by Raid 200 (2000 Toulouse, France); Me, Ludovic; Wu, S. Felix

• ISBN13: 9783540410850
• ISBN10: 3540410856
• Format: Paperback
• Copyright: 2000-10-01
• Publisher: Springer Verlag

Summary

This book constitutes the refereed proceedings of the Third International Workshop on Recent Advances in Intrusion Detection, RAID 2000, held in Toulouse, France in October 2000. The 14 revised full papers presented were carefully reviewed and selected from a total of 26 papers and 30 extended abstracts submitted. The papers are organized in sections on logging, data mining, modeling process behaviour, IDS evaluation, and modeling.

Table of Contents

Logging
Better Logging through Formality	1	(16)
Chapman Flack
Mikhail J. Atallah
A Pattern Matching Based Filter for Audit Reduction and Fast Detection of Potential Intrusions	17	(11)
Josue Kuri
Gonzalo Navarro
Ludovic Me
Laurent Heye
Transaction-Based Pseudonyms in Audit Data for Privacy Respecting Intrusion Detection	28	(21)
Joachim Biskup
Ulrich Flegel
Data Mining
A Data Mining and CIDF Based Approach for Detecting Novel and Distributed Intrusions	49	(17)
Wenke Lee
Rahul A. Nimbalkar
Kam K. Yee
Sunil B. Patil
Pragneshkumar H. Desai
Thuan T. Tran
Salvatore J. Stolfo
Using Finite Automata to Mine Execution Data for Intrusion Detection: A Preliminary Report	66	(14)
Christoph Michael
Anup Ghosh
Modeling Process Behavior
Adaptive, Model-Based Monitoring for Cyber Attack Detection	80	(13)
Alfonso Valdes
Keith Skinner
A Real-Time Intrusion Detection System Based on Learning Program Behavior	93	(17)
Anup K. Ghosh
Christoph Michael
Michael Schatz
Intrusion Detection Using Variable-Length Audit Trail Patterns	110	(20)
Andreas Wespi
Marc Dacier
Herve Debar
Flexible Intrusion Detection Using Variable-Length Behavior Modeling in Distributed Environment: Application to CORBA Objects	130	(15)
Zakia Marrakchi
Ludovic Me
Bernard Vivinis
Benjamin Morin
IDS Evaluation
The 1998 Lincoln Laboratory IDS Evaluation (A Critique)	145	(17)
John McHugh
Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation	162	(21)
Richard Lippmann
Joshua W. Haines
David J. Fried
Jonathan Korba
Kumar Das
Using Rule-Based Activity Descriptions to Evaluate Intrusion-Detection Systems	183	(14)
Dominique Alessandri
Modeling
LAMBDA: A Language to Model a Database for Detection of Attacks	197	(20)
Frederic Cuppens
Rodolphe Ortalo
Target Naming and Service Apoptosis	217	(10)
James Riordan
Dominique Alessandri
Author Index	227