| Title | Date Added | Company | |
|---|---|---|---|
![]() |
Experiences With Specification-Based Intrusion Detection | 2009-01-01 | State University of New York, Stony Brook |
| Specification-based intrusion detection, where manually specified program behavioral specifications are used as a basis to detect attacks, have been proposed as a promising alternative that combine the strengths of misuse detection (accurate detection of known attacks) and anomaly detection (ability to detect novel attacks). However, the question of whether this promise can be realized in practice has remained open. The author answers this question in this paper, based on their experience in building a specification-based intrusion detection system and experimenting with it. The experiments included the 1999 DARPA/AFRL online evaluation, as well as experiments conducted using 1999 DARPA/ Lincoln Labs offline evaluation data. These experiments show that an effective specification-based IDS can be developed with modest efforts.
Tags: Intrusion - Tampering |
|||
![]() |
Detection of Slow Malicious Worms Using Multi-Sensor Data Fusion | 2009-01-01 | Carleton University |
| Detection of slow worms is particularly challenging due to the stealthy nature of their propagation techniques and their ability to blend with normal traffic patterns. This paper, proposes a distributed detection approach based on the Generalized Evidence Processing (GEP) theory, a sensor integration and data fusion technique. With GEP theory, evidence collected by distributed detectors determines the probability associated with a detection decision under a hypothesis. The collected evidence is combined to arrive at an optimal fused detection decision by minimizing a cumulative decision risk function. Typically, malicious traffic flows of varying scanning rates can occur in the wild, and the difficulty in detecting slow scanning worms in particular can be exacerbated by interference from other traffic flows scanning at faster rates.
Tags: Intrusion - Tampering |
|||
![]() |
Access Protection in McAfee VirusScan Enterprise and Host Intrusion Prevention | 2009-01-01 | McAfee |
| Securing networks against a wide range of threats - viruses, spyware, worms, rootkits, and Trojans - is more challenging than ever. Whether it's a global enterprise or a small or medium-sized business that has a full-time security staff, VSE ensures that endpoint servers, desktops, and laptops remain malware free. VSE proactively stops and removes threats, extends coverage for new security risks, and reduces the cost of managing outbreak responses. It even stops zero-day threats and mitigates window of vulnerability without an update.
Tags: Intrusion - Tampering, Intrusion - Tampering |
|||
![]() |
Exploiting Reconfigurable Hardware for Network Security | 2009-01-01 | University of Oslo |
| One type of network security strategy is using an Intrusion Detection System (IDS). They are implementing IDS in FPGA-based (Field Programmable Gate Array) reconfigurable hardware. This is to achieve higher speed and more efficient performance of network security, as networks develop very fast with consequently more demanding constraints. This paper provides novel hardware architectures for an IDS system which should be able to monitor networks with a speed up to 2.68 Gbps.
Tags: Security Administration, Intrusion - Tampering |
|||
![]() |
Eight Questions To Ask About Your Intrusion-Security Solution | 2009-01-01 | TippingPoint Technologies |
| Network security is too important to fall victim to marketplace confusion and misleading claims. Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) have similar names and market analysts tend to lump them together into a single security category - IDP (Intrusion Detection and Prevention). However, the capabilities and underlying design of intrusion detection and intrusion prevention systems couldn't be more different. Before you commit to an intrusion-security solution, learn the right questions to ask before you buy. And expect to uncover clear, compelling answers that will keep your network safe.
Tags: Intrusion - Tampering, Security Administration, Security Administration, Intrusion - Tampering |
|||
![]() |
Real World Intrusion Prevention for the Demands of a New Security Reality | 2009-01-01 | TippingPoint Technologies |
| In an age where e-commerce and business critical applications are quickly becoming "Webified" and security threats are morphing faster than ever, an organization needs to explore what can be done while making the most of security budgets and resources. Learn about the three primary areas that organizations must consider when formulating network security strategies and evaluating possible solutions for intrusion prevention.
Tags: Security Administration, Security Administration, Intrusion - Tampering, Security Administration |
|||
![]() |
IPS vs. IDS: Similar on the Surface, Polar Opposites Underneath | 2009-01-01 | TippingPoint Technologies |
| A common notion is that an Intrusion Prevention System (IPS) is nothing more than an Intrusion Detection System (IDS) deployed in-line with blocking capabilities. Although IPS and IDS both examine traffic looking for attacks, there are critical differences. Learn why that notion is incorrect and the many critical differences in the nature and priority of IPS and IDS requirements organizations need to consider before making a commitment.
Tags: Intrusion - Tampering, Security Administration, Security Administration, Intrusion - Tampering |
|||
![]() |
IDG White Paper: How You Can Gain Business Advantage by Protecting Against Internal & External Threats | 2008-12-03 | Oracle |
| Recent years have seen increasing demands on midsize organizations to ensure compliance with changing legal, financial and governance regulations. As a result, they have come under pressure to improve flexibility in a bid to keep their reporting, data security, traceability and quality processes transparent and adapt them whenever necessary. As such, data protection is often viewed as an onerous 'tax' on IT budgets - a necessary evil to keep the regulators at bay. However this paper will argue that the performance, collaboration and governance of a midsize organization can improve immediately if its operations are based on a secure, consolidated and open information infrastructure.
This paper will also show that, with the right multi-level data protection against a wide range of threats, it is no longer necessary for midsize organizations to tolerate a little insecurity for the sake of platform consistency. Nor do they need to implement security protocols so rigidly that productivity falls. Affordable data infrastructure solutions based on open standards that are inherently secure are now available to midsize organizations. Not only are they quick and easy to deploy, use and maintain, they are designed to meet the constraints of limited IT resources and budgets in the face of the current economic downturn. Tags: Intrusion - Tampering, Network Management, Intrusion - Tampering, IT Budgeting |
|||
![]() |
Why Small Companies Should Think Outside the Box for Protecting Endpoints | 2009-02-28 | Sunbelt Software |
| Endpoint security issues simply can't be ignored, regardless of the size of the organization. Small enterprises in particular often need to "do more with less" when it comes to protecting their endpoints from Internet-based threats and vulnerabilities. Read this "Sector Insight" research study to learn why Aberdeen Group recommends small enterprises be open to endpoint security solutions from vendors other than McAfee and Symantec, especially products with minimal footprint and impact on performance.
Tags: Intrusion - Tampering, Intrusion - Tampering, Security Administration, Intrusion - Tampering |
|||
![]() |
CDW Network Security Assessment Tool | 2009-01-01 | CDW |
| How does your network security compare to those of your peers? Learn where you may be vulnerable and how to address those risks. Find out with this quick assessment.
Tags: Data Tools, Security Administration, LAN - WAN, Intrusion - Tampering |
The Roots for a Greener World
Discover Hitachi's Environmental Vision 2025 and featured Eco-Products
The Desktop Virtualization Revolution is here!
Find our more with Citrix Simplicity is Power
Master in Organisational Leadership
Part-time masters program from Monash University. Find out more.
Lack of visibility into network issues and performance?
Find out today. Download SolarWinds FREE 30-Day Trial Software here.
IT Salary & Skills Report 2009
Join activeTechPros for free access to the report