2022/01/26 by Daciér, Marc, Debar, Hervé, Holz, Thorsten +5
#Intrusion detection and prevention #attack response and countermeasures #automated security #denial of service detection and response #event correlation #flow analysis #ma network monitoring #reactive security #survivability and self-protection
paper · doi:10.4230/dagsemproc.08102.4
The starting point of this working group was the question about the kinds of attacks that can be detected by inspecting in network traffic. In general, we identified four major problems that network-based intrusion detection systems are facing: 1. Encrypted network traffic 2. Application-level attacks 3. Performance 4. Evasion attack.