Testing and evaluating computer intrusion detection systems

Subscribe (Full Service)


	Search: The ACM Digital Library The Guide

	Feedback

Testing and evaluating computer intrusion detection systems

Full text

Html (36 KB), Pdf

Pdf (220 KB)

Source

Communications of the ACM archive
Volume 42 , Issue 7 (July 1999) table of contents

Pages: 53 - 61

Year of Publication: 1999

ISSN:0001-0782

Authors

Robert Durst	SenCom Corp.
Terrence Champion	US Air Force
Brian Witten	US Air Force
Eric Miller	US Air Force
Luigi Spagnuolo	US Air Force

Publisher

ACM New York, NY, USA

Bibliometrics

Downloads (6 Weeks): 24, Downloads (12 Months): 200, Citation Count: 23

Additional Information:

cited by index terms review collaborative colleagues

Tools and Actions:	Request Permissions Review this Article Save this Article to a Binder Display Formats: BibTeX EndNote ACM Ref

DOI Bookmark:	Use this link to bookmark this Article: http://doi.acm.org/10.1145/306549.306571 What is a DOI?

CITED BY 23

	Donald J. Welch , Nathan Buchheit , Anthony Ruocco, Discussion: strike back: offensive actions in information warfare, Proceedings of the 1999 workshop on New security paradigms, p.47-52, September 22-24, 1999, Caledon Hills, Ontario, Canada
	Brajendra Panda , Sani Tripathy, Data dependency based logging for defensive information warfare, Proceedings of the 2000 ACM symposium on Applied computing, p.361-365, March 2000, Como, Italy
	Steven T. Eckmann , Giovanni Vigna , Richard A. Kemmerer, STATL: an attack language for state-based intrusion detection, Journal of Computer Security, v.10 n.1-2, p.71-103, 2002
	Steven T. Eckmann , Giovanni Vigna , Richard A. Kemmerer, STATL: an attack language for state-based intrusion detection, Journal of Computer Security, v.10 n.1-2, p.71-103, 2002
	John McHugh , Alan Christie , Julia Allen, Defending Yourself: The Role of Intrusion Detection Systems, IEEE Software, v.17 n.5, p.42-51, September 2000
	Giovanni Vigna , Fredrik Valeur , Richard A. Kemmerer, Designing and implementing a family of intrusion detection systems, ACM SIGSOFT Software Engineering Notes, v.28 n.5, September 2003
	Giovanni Vigna , Fredrik Valeur , Richard A. Kemmerer, Designing and implementing a family of intrusion detection systems, ACM SIGSOFT Software Engineering Notes, v.28 n.5, September 2003
	Alexander D. Korzyk, Sr., Integrating cooperative engagement capability into network-centric information system security, Current security management & Ethical issues of information technology, Idea Group Publishing, Hershey, PA, 2003
	Testing Intrusion detection systems: a critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by Lincoln Laboratory, ACM Transactions on Information and System Security (TISSEC), v.3 n.4, p.262-294, Nov. 2000
	Giovanni Vigna , William Robertson , Davide Balzarotti, Testing network-based intrusion detection signatures using mutant exploits, Proceedings of the 11th ACM conference on Computer and communications security, October 25-29, 2004, Washington DC, USA
	Giovanni Vigna , William Robertson , Davide Balzarotti, Testing network-based intrusion detection signatures using mutant exploits, Proceedings of the 11th ACM conference on Computer and communications security, October 25-29, 2004, Washington DC, USA
	Wun-Hwa Chen , Sheng-Hsun Hsu , Hwang-Pin Shen, Application of SVM and ANN for intrusion detection, Computers and Operations Research, v.32 n.10, p.2617-2634, October 2005
	Fredrik Valeur , Giovanni Vigna , Christopher Kruegel , Richard A. Kemmerer, A Comprehensive Approach to Intrusion Detection Alert Correlation, IEEE Transactions on Dependable and Secure Computing, v.1 n.3, p.146-169, July 2004
	Fredrik Valeur , Giovanni Vigna , Christopher Kruegel , Richard A. Kemmerer, A Comprehensive Approach to Intrusion Detection Alert Correlation, IEEE Transactions on Dependable and Secure Computing, v.1 n.3, p.146-169, July 2004
	Spyros Antonatos , Kostas G. Anagnostakis , Evangelos P. Markatos, Generating realistic workloads for network intrusion detection systems, ACM SIGSOFT Software Engineering Notes, v.29 n.1, January 2004
	Jarmo Mölsä, Mitigating denial of service attacks: a tutorial, Journal of Computer Security, v.13 n.6, p.807-837, December 2005
	Huseyin Cavusoglu , Srinivasan Raghunathan, Configuration of Detection Software: A Comparison of Decision and Game Theory Approaches, Decision Analysis, v.1 n.3, p.131-148, September 2004
	Huseyin Cavusoglu , Srinivasan Raghunathan , Hasan Cavusoglu, Configuration of and Interaction Between Information Security Technologies: The Case of Firewalls and Intrusion Detection Systems, Information Systems Research, v.20 n.2, p.198-217, June 2009
	Young U. Ryu , Hyeun-Suk Rhee, Evaluation of Intrusion Detection Systems Under a Resource Constraint, ACM Transactions on Information and System Security (TISSEC), v.11 n.4, p.1-24, July 2008
	Syed Masum Emran , Nong Ye, A System Architecture for Computer Intrusion Detection, Information-Knowledge-Systems Management, v.2 n.3, p.271-290, August 2001
	Hai Wang , Peng Liu , Lunquan Li, Evaluating the survivability of Intrusion Tolerant Database systems and the impact of intrusion detection deficiencies, International Journal of Information and Computer Security, v.1 n.3, p.315-340, June 2007
	Taghi M. Khoshgoftaar , Kehan Gao , Hua Lin, Indirect classification approaches: a comparative study in network intrusion detection, International Journal of Computer Applications in Technology, v.27 n.4, p.232-245, October 2006
	Bazara I. A. Barry, Intrusion detection with OMNeT++, Proceedings of the 2nd International Conference on Simulation Tools and Techniques, March 02-06, 2009, Rome, Italy

INDEX TERMS

Primary Classification:
K. Computing Milieux
K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
K.6.5 Security and Protection (D.4.6, K.4.2)
Subjects: Unauthorized access (e.g., hacking, phreaking)

Additional Classification:
C. Computer Systems Organization
C.2 COMPUTER-COMMUNICATION NETWORKS
C.2.0 General
Subjects: Security and protection (e.g., firewalls)

General Terms:
Management, Security

REVIEW

"Anthony Donald Vanker : Reviewer"

This very readable paper approaches its topic by providing a dense but informative introduction, describing a novel testbed for evaluating intrusion detection (ID) software, and presenting the results of evaluating several intrusion detection more...

Collaborative Colleagues:

Robert Durst: colleagues

Terrence Champion: colleagues

Brian Witten: colleagues

Eric Miller: colleagues

Luigi Spagnuolo: colleagues

Adobe Acrobat

QuickTime

Windows Media Player

Real Player