Web-based vulnerabilities represent a substantial portion of the security exposures of
computer networks. In order to detect known web-based attacks, misuse detection systems …

Web-based systems are often a composition of infrastructure components, such as web
servers and databases, and of application-specific code, such as HTML-embedded scripts …

Web-based vulnerabilities represent a substantial portion of the security exposures of
computer networks. In order to detect known web-based attacks, misuse detection systems …

Intrusion Detection and Correlation: Challenges and Solutions presents intrusion detection
systems (IDSs) and addresses the problem of managing and correlating the alerts produced …

The custom, ad hoc nature of web applications makes learning-based anomaly detection
systems a suitable approach to provide early warning about the exploitation of novel …

Web servers are ubiquitous, remotely accessible, and often misconfigured. In addition,
custom Web-based applications may introduce vulnerabilities that are overlooked even by …

Current intrusion detection systems work in isolation from access control for the application
the systems aim to protect. The lack of coordination and interoperation between these …

Abstract Intrusion Detection Systems (IDSs) can analyze network traffic for signs of attacks
and intrusions. However, encrypted communication limits their visibility and sophisticated …

Klaus Julisch IBM Zurich Research Laboratory Säumerstrasse 4 8803 Rüschlikon,
Switzerland e-mail: kju@ zurich. ibm. com In response to attacks against enterprise …

In the recent past, both network-and host-based approaches to intrusion detection have
received much attention in the network security community. No approach, taken exclusively …