intrusion detection

:: home :: research

CERIAS

The Center for Education and Research in Information Assurance and Security (CERIAS) is currently viewed as one of the world's leading centers for research and education in areas of information security that are crucial to the protection of critical computing and communication infrastructure.
http://www.cerias.purdue.edu/

Columbia University

This project is a data-mining based approach to detecting intruders in computer systems. The project approaches the intrusion detection problem from a data-mining perspective. Large quantities of data are collected from the system and analyzed to build models of normal behavior and intrusion behavior. These models are evaluated on data collected in real time to detect intruders.
http://www1.cs.columbia.edu/ids/

CSG

Dartmouth Cybersecurity Research group.
http://www.ists.dartmouth.edu/cybersecurity/

Intrusion Detection & Network Security Group

research group @ North Carolina State University
http://discovery.csc.ncsu.edu/

Kerf

Kerf (formerly known as Sawmill) is a set of tools designed to help system administrators analyze intrusions in their network of workstations.
http://kerf.cs.dartmouth.edu/

Reliable Software Group - STAT

State Transition Analysis Technique for Real-Time Intrusion Detection
http://www.cs.ucsb.edu/~rsg/STAT/index.html

SRI

SRI International's System Design Laboratory has been actively involved in intrusion-detection research since 1983. Our first project, the Intrusion Detection Expert System (IDES), was a rule-based expert system trained to detect known malicious activity. That system was polished and enhanced to form NIDES, the Next-Generation Intrusion Detection Expert System. Currently, our research focuses on EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances, a modern system designed to detect and respond to today's network attacks.
http://www.sdl.sri.com/programs/intrusion/