'Signature matching' diaporamas de présentation

Misuse detection systems

Misuse detection systems. Contents. Overview of signature based IDS SNORT SNORT rules. Overview of signature based IDS. Signature-based detection is based on the premise that abnormal or malicious network traffic is different from normal traffic.

2.01k views • 177 slides

Towards High Performance Network Defense

Towards High Performance Network Defense. Zhichun Li EECS Department Northwestern University. Motivation. Attackers. Botnets. Professional attackers exploit networks for profit $$$. Worms. Network Level Defense.

730 views • 72 slides

Attack Transformation to Evade Intrusion Detection

Attack Transformation to Evade Intrusion Detection. Northwestern Lab for Internet and Security Technology (LIST). Introduction. Evade intrusion detection Traditional approaches: fragmenting PDU in IP, TCP or RPC payload. Instead, we care about protocol-level flaws in signature. Our goal:

760 views • 58 slides

XFA? Faster Signature Matching With Extended Automata

Author ? Randy Smith & Cristian Estan & Somesh Jha Publisher ? IEEE Symposium on Security & privacy,2008 Presenter ? Wen-Tse Liang Date ? 2010/10/27. XFA? Faster Signature Matching With Extended Automata. Outline. Introduction Background Technical Overview

340 views • 22 slides

Towards Vulnerability-Based Intrusion Detection with Event Processing

Towards Vulnerability-Based Intrusion Detection with Event Processing. Amer Farroukh , Mohammad Sadoghi , Hans-Arno Jacobsen University of Toronto. Limitation of Regular Expressions. Conficker worm infected more than 10 million hosts in 2008. Economic loss tallied up to $9.1 billion.

265 views • 19 slides

Zhichun Li, Gao Xia, Yi Tang, Yan Chen, and Bin Liu

139 views • 1 slides