Automating Human Workflow in IDS Analysis
Simulation of Human Activity out of Log Files
(Sprache: Englisch)
Nowadays Intrusion Detection Systems (IDS) are still relying on human analysts, fulfilling the task of attack detection. The alarm overload produced by said systems requires a relief of the analyst's daily workload. After an introduction to network...
Leider schon ausverkauft
versandkostenfrei
Buch
49.00 €
24 DeutschlandCard Punkte
sammeln
- Lastschrift, Kreditkarte, Paypal, Rechnung
- Kostenlose Rücksendung
Produktdetails
Produktinformationen zu „Automating Human Workflow in IDS Analysis “
Nowadays Intrusion Detection Systems (IDS) are still relying on human analysts, fulfilling the task of attack detection. The alarm overload produced by said systems requires a relief of the analyst's daily workload. After an introduction to network security, the book presents an approach based on finite state machines (FSM), showing that human analysis behavior can be modeled directly from IDS log data. The specific alarm data alone revealed lacking information needed for the chosen Text Classification approach to create an operational decision model for the FSM. Further research is necessary. Rationales and suggestions to solve the problems are discussed. This work was written as Diploma Thesis at the Department of Informatics, University of Zurich in collaboration with Swisscom Innovations Inc, Bern, where this is also a spearhead of ongoing and future research in the area of traffic to protocol state machine reverse engineering.
Klappentext zu „Automating Human Workflow in IDS Analysis “
Nowadays Intrusion Detection Systems (IDS) are still relying on human analysts, fulfilling the task of attack detection. The alarm overload produced by said systems requires a relief of the analyst's daily workload. After an introduction to network security, the book presents an approach based on finite state machines (FSM), showing that human analysis behavior can be modeled directly from IDS log data. The specific alarm data alone revealed lacking information needed for the chosen Text Classification approach to create an operational decision model for the FSM. Further research is necessary. Rationales and suggestions to solve the problems are discussed. This work was written as Diploma Thesis at the Department of Informatics, University of Zurich in collaboration with Swisscom Innovations Inc, Bern, where this is also a spearhead of ongoing and future research in the area of traffic to protocol state machine reverse engineering.
Autoren-Porträt von Dominic Windisch
Born and grown up in Central Switzerland, Dominic Windisch attended the first part of the Computer Science Engineer study program at ETH Zurich and changed to the Department of Informatics, University of Zurich for Information Management studies.
Bibliographische Angaben
- Autor: Dominic Windisch
- 2008, 96 Seiten, Maße: 17,3 x 24,1 cm, Kartoniert (TB), Englisch
- Verlag: VDM Verlag Dr. Müller
- ISBN-10: 3836454599
- ISBN-13: 9783836454599
Sprache:
Englisch
Kommentar zu "Automating Human Workflow in IDS Analysis"
0 Gebrauchte Artikel zu „Automating Human Workflow in IDS Analysis“
| Zustand | Preis | Porto | Zahlung | Verkäufer | Rating |
|---|
Schreiben Sie einen Kommentar zu "Automating Human Workflow in IDS Analysis".
Kommentar verfassen