Recent Advances in Intrusion Detection

9th International Symposium, RAID 2006 Hamburg, Germany, September 20-22, 2006 Proceedings

  • Diego Zamboni
  • Christopher Kruegel
Conference proceedings RAID 2006

DOI: 10.1007/11856214

Part of the Lecture Notes in Computer Science book series (LNCS, volume 4219)

Table of contents

  1. Front Matter
    PDF

  2. Recent Advances in Intrusion Detection

    1. Anomaly Detection

      1. A Framework for the Application of Association Rule Mining in Large Intrusion Detection Infrastructures
        James J. Treinen, Ramakrishna Thurimella
        Pages 1-18
      2. Behavioral Distance Measurement Using Hidden Markov Models
        Debin Gao, Michael K. Reiter, Dawn Song
        Pages 19-40

    2. Attacks

      1. Automated Discovery of Mimicry Attacks
        Jonathon T. Giffin, Somesh Jha, Barton P. Miller
        Pages 41-60
      2. Allergy Attack Against Automatic Signature Generation
        Simon P. Chung, Aloysius K. Mok
        Pages 61-80
      3. Paragraph: Thwarting Signature Learning by Training Maliciously
        James Newsome, Brad Karp, Dawn Song
        Pages 81-105

    3. System Evaluation and Threat Assessment

      1. Anomaly Detector Performance Evaluation Using a Parameterized Environment
        Jeffery P. Hansen, Kymie M. C. Tan, Roy A. Maxion
        Pages 106-126
      2. Ranking Attack Graphs
        Vaibhav Mehta, Constantinos Bartzis, Haifeng Zhu, Edmund Clarke, Jeannette Wing
        Pages 127-144
      3. Using Hidden Markov Models to Evaluate the Risks of Intrusions
        André Årnes, Fredrik Valeur, Giovanni Vigna, Richard A. Kemmerer
        Pages 145-164

    4. Malware Collection and Analysis

      1. The Nepenthes Platform: An Efficient Approach to Collect Malware
        Paul Baecher, Markus Koetter, Thorsten Holz, Maximillian Dornseif, Felix Freiling
        Pages 165-184
      2. Automatic Handling of Protocol Dependencies and Reaction to 0-Day Attacks with ScriptGen Based Honeypots
        Corrado Leita, Marc Dacier, Frederic Massicotte
        Pages 185-205
      3. Fast and Evasive Attacks: Highlighting the Challenges Ahead
        Moheeb Abu Rajab, Fabian Monrose, Andreas Terzis
        Pages 206-225

    5. Anomaly- and Specification-Based Detection

      1. Anagram: A Content Anomaly Detector Resistant to Mimicry Attack
        Ke Wang, Janak J. Parekh, Salvatore J. Stolfo
        Pages 226-248
      2. DEMEM: Distributed Evidence-Driven Message Exchange Intrusion Detection Model for MANET
        Chinyang Henry Tseng, Shiau-Huey Wang, Calvin Ko, Karl Levitt
        Pages 249-271

    6. Network Intrusion Detection

      1. Enhancing Network Intrusion Detection with Integrated Sampling and Filtering
        Jose M. Gonzalez, Vern Paxson
        Pages 272-289
      2. WIND: Workload-Aware INtrusion Detection
        Sushant Sinha, Farnam Jahanian, Jignesh M. Patel
        Pages 290-310
      3. SafeCard: A Gigabit IPS on the Network Card
        Willem de Bruijn, Asia Slowinska, Kees van Reeuwijk, Tomas Hruby, Li Xu, Herbert Bos
        Pages 311-330
  3. Back Matter
    PDF

About these proceedings

Keywords

RAID anomaly detection intrusion detection intrusion prevention mimicry attacks network intrusion network security performance port scan detection privacy risk analysis secure communications security spoof detection worm detection

Editors and affiliations

  • Diego Zamboni
    • 1
  • Christopher Kruegel
    • 2
  1. 1.IBM Research LaboratoryRüschlikonSwitzerland
  2. 2.Secure Systems LabTechnical University of ViennaViennaAustria

Bibliographic information

  • Copyright Information Springer-Verlag Berlin Heidelberg 2006
  • Publisher Name Springer, Berlin, Heidelberg
  • eBook Packages Computer Science
  • Print ISBN 978-3-540-39723-6
  • Online ISBN 978-3-540-39725-0
  • Series Print ISSN 0302-9743
  • Series Online ISSN 1611-3349