NDLI: A high-performance network intrusion detection system

Please wait, while we are loading the content...

The base-rate fallacy and its implications for the difficulty of intrusion detection

A high-performance network intrusion detection system

The proactive security toolkit and applications

A fuzzy commitment scheme

On the fly signatures based on factoring

Signature schemes based on the strong RSA assumption

Proof-carrying authentication

Public-key cryptography and password protocols: the multi-user case

Password hardening based on keystroke dynamics

Secure protocol transformation via “expansion”: from two-party to groups

A compact and fast hybrid signature scheme for multicast packet authentication

Scalable multicast security in dynamic groups

Anonymous authentication with subset queries (extended abstract)

Efficient private bidding and auctions with an oblivious third party

Using smartcards to secure a personalized gambling device

Efficient verifiable encryption (and fair exchange) of digital signatures

A high-performance network intrusion detection system

Content Provider	ACM Digital Library
Author	Guang, Y. Sekar, R. Verma, S. Shanbhag, T.
Abstract	In this paper we present a new approach for network intrusion detection based on concise specifications that characterize normal and abnormal network packet sequences. Our specification language is geared for a robust network intrusion detection by enforcing a strict type discipline via a combination of static and dynamic type checking. Unlike most previous approaches in network intrusion detection, our approach can easily support new network protocols as information relating to the protocols are not hard-coded into the system. Instead, we simply add suitable type definitions in the specifications and define intrusion patterns on these types. We compile these specifications into a high-performance network intrusion detection system. Important components of our approach include efficient algorithms for pattern-matching and information aggregation on sequences of network packets. In particular, our techniques ensure that the matching time is insensitive to the number of patterns characterizing different network intrusions, and that the aggregation operations typically take constant time per packet. Our system participated in an intrusion detection evaluation organized by MIT Lincoln Labs, where our system demonstrated its effectiveness (96% detection rate on low-level network attacks) and performance (real-time detection at 500Mbps), while producing very few false positives (0.05 to 0.1 per attack).
Starting Page	8
Ending Page	17
Page Count	10
File Format	PDF
ISBN	1581131488
DOI	10.1145/319709.319712
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	1999-11-01
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in