Languages and Tools for Rule-Based Distributed Intrusion Detection


Published: Apr 05, 2000 Updated: Apr 05, 2000 Section: Network Security Library :: Intrusion Detection Author: Printable Version Adjust font size: Rating: 3.7/5 - 6 Votes 1 2 3 4 5

The ever-rising complexity of operating systems and communication networks has resulted in an increased difficulty in designing reliable security protection mechanisms. As a last line of defense, automated audit trail analysis can be used to detect various forms of security intrusions. However, automated audit trail analysis is difficult because of the high amount of audit data. This difficulty is even compounded in a distributed environment, where an attack evideence may span numerous hosts of possibly different architectures, operating systems and auditing facilities.

Click Here to download this article