Rule generalisation in intrusion detection systems using SNORT.
Uwe AickelinJamie TwycrossThomas Hesketh-RobertsPublished in: Int. J. Electron. Secur. Digit. Forensics (2007)
Keyphrases
- intrusion detection system
- intrusion detection
- network security
- network intrusion detection
- anomaly detection
- computer networks
- network traffic
- computer systems
- distributed intrusion detection
- computer security
- denial of service attacks
- cyber security
- attack detection
- alert correlation
- association rules
- malicious activities
- text classification
- network attacks
- databases
- information security
- distributed systems
- metadata
- machine learning
- cyber attacks