Overview
- Details how intrusion detection works in network security with comparisons to traditional methods such as firewalls and cryptography
- Analyzes the challenges in interpreting and correlating Intrusion Detection alerts
- Includes supplementary material: sn.pub/extras
Part of the book series: Advances in Information Security (ADIS, volume 14)
Access this book
Tax calculation will be finalised at checkout
Other ways to access
Table of contents (10 chapters)
Keywords
About this book
Intrusion Detection and Correlation: Challenges and Solutions presents intrusion detection systems (IDSs) and addresses the problem of managing and correlating the alerts produced. This volume discusses the role of intrusion detection in the realm of network security with comparisons to traditional methods such as firewalls and cryptography.
The Internet is omnipresent and companies have increasingly put critical resources online. This has given rise to the activities of cyber criminals. Virtually all organizations face increasing threats to their networks and the services they provide. Intrusion detection systems (IDSs) take increased pounding for failing to meet the expectations researchers and IDS vendors continually raise. Promises that IDSs are capable of reliably identifying malicious activity in large networks were premature and never tuned into reality.
While virus scanners and firewalls have visible benefits and remain virtually unnoticed during normal operations, the situation is different with intrusion detection sensors. State-of-the-art IDSs produce hundreds or even thousands of alerts every day. Unfortunately, almost all of these alerts are false positives, that is, they are not related to security-relevant incidents.
Intrusion Detection and Correlation: Challenges and Solutions analyzes the challenges in interpreting and combining (i.e., correlating) alerts produced by these systems. In addition, existing academic and commercial systems are classified; their advantage and shortcomings are presented, especially in the case of deployment in large, real-world sites.
Authors and Affiliations
Bibliographic Information
Book Title: Intrusion Detection and Correlation
Book Subtitle: Challenges and Solutions
Authors: Christopher Kruegel, Fredrik Valeur, Giovanni Vigna
Series Title: Advances in Information Security
DOI: https://doi.org/10.1007/b101493
Publisher: Springer New York, NY
eBook Packages: Computer Science, Computer Science (R0)
Copyright Information: Springer-Verlag US 2005
Hardcover ISBN: 978-0-387-23398-7Published: 12 November 2004
Softcover ISBN: 978-1-4419-3624-0Published: 19 November 2010
eBook ISBN: 978-0-387-23399-4Published: 29 December 2005
Series ISSN: 1568-2633
Series E-ISSN: 2512-2193
Edition Number: 1
Number of Pages: XIV, 118
Topics: Data Structures and Information Theory, Cryptology, Computer Communication Networks, Information Systems Applications (incl. Internet), e-Commerce/e-business, Coding and Information Theory