Intrusion Detection

Intrusion may be defined as "any set of actions that attempt to compromise the integrity, confidentiality or availability of a resource''. With the rapid growth of network-based computer systems and with increasing their roles in modern society, intrusion detection is becoming very important research area. Intrusion detection can be therefore defined as a technique of identifying intrusions and/or individuals who are trying to break into a computer system without authorization and those who have legitimate access but are abusing their privileges. An intrusion detection system (IDS) is a computer system that attempts to perform the task of intrusion detection. There are basically two major directions in intrusion detection: signature based intrusion detection (misuse detection) and anomaly detection.

Academic Research related to Intrusion Detection

• Columbia University - Project IDS: Intrusion Detection System
• Georgia Institute of Technology - Cost-sensitive intrusion detection
• George Mason university - Audit Data Analysis and Mining (ADAM)
• Mississippi State University - Intelligent Intrusion Detection (IIDS)
• Florida Institute of Technology - PHAD Project
• University of California - Santa Barbara - State Transition Analysis Technique (STAT)
• Purdue University - CERIAS Group
• MIT Lincoln Laboratory - DARPA Intrusion Detection and Evaluation
• University of New Mexico - Computer Immune Systems
• Naval Postgraduate School - Intrusion Defense
• IBM Research Laboratory - Zürich,  IBM Privacy Institute
• UC Davis - Computer Security Laboratory
• University of Virginia - Application Intrusion Detection
• Brandenburg University - Adaptive Intrusion Detection System
• MINDS (Minnesota Intrusion Detection System)
  

Industrial Research related to Intrusion Detection

• MITRE Corporation, Inc.
• SRI International - System Design Laboratory
• Intelligent Automation, Inc.
• Scientific Systems Company, Inc.
• CERT Coordination Center

Links to Intrusion Detection Web Pages or to Other Intrusion Detection Links

• Intrusion Detection Pages, Purdue University
• Intrusion Detection Links by Security TechNet.com
• Readings in Intrusion Detection, Wenke Lee
• Security Issues in Data Mining by Chris Clifton
• Data Mining and Security
• STAT Links, University of California Santa Barabara
• Michael Sobirey's Intrusion Detection Systems page
• Publications related to Intrusion Detection, CADIP Group
• Intrusion Detection Links by Internet Security Systems
• DMOZ Links to Intrusion Detection Systems
• Links to Commercial Intrusion Detection detection Systems
• InfoSysSec Intrusion Detection Links and Papers

Intrusion Detection Bibliographies:

• Ludovic Me, Intrusion Detection - A Bibliography
• Michael Sobirey's Intrusion Detection Systems Bibliography
• CERIAS Intrusion Detection Systems Bibliography

Popular Commercial Software for Intrusion Detection

• SNORT - Open Source Network Intrusion Detection System
• Emerald - SRI International
• NIDES - SRI International
• NFR Security Network Intrusion Detection