Protocol Anomaly Detection for Network-based Intrusion Detection

A taxonomy was developed by Axelsson to define the space of intrusion detection technology and classify IDSs. The taxonomy categorizes IDSs by their detection principle and their operational aspects. The two main categories of detection principles are signature detection and anomaly detection. The...

By Kumar Das

January 5, 2002

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Blue Team Operations

September 9, 2021

A Visual Summary of SANS Blue Team Summit 2021

SANS Blue Team Summit was a free, global, virtual event for the community. Check out the graphic recordings created in real-time during the event.

Blue Team Operations

September 2, 2021

Making 'AutoMagic' Happen in the SOC

The future of security operations will see automation and infosec pros coming together intelligently, as we'll discuss at the SANS Blue Team Summit.

Michelle Petersen

Digital Forensics and Incident Response, Cyber Defense Essentials, Industrial Control Systems Security, Purple Team, Blue Team Operations, Penetration Testing and Ethical Hacking, Cloud Security, Security Management, Legal, and Audit

November 30, 2020

Good News: SANS Virtual Summits Will Be FREE for the Community in 2021

They’re virtual. They’re global. They’re free.