A Structured Approach to Selecting Data Collection Mechanisms for Intrusion Detection
Book chapter, 2011

This chapter aims at providing a clear and concise picture of data collection for intrusion detection. It provides a detailed explanation of generic data collection mechanism components and the interaction with the environment, from initial triggering to output of log data records. Taxonomies of mechanism characteristics and deployment considerations are provided and discussed. Furthermore, guidelines and hints for mechanism selection and deployment are provided. The guidelines are aimed to assist intrusion detection system developers, designers, and operators in selecting mechanisms for resource efficient data collection.

data collection

intrusion detection

computer systems

IT security

Author

Ulf Larson

Chalmers, Computer Science and Engineering (Chalmers), Networks and Systems (Chalmers)

Erland Jonsson

Chalmers, Computer Science and Engineering (Chalmers), Networks and Systems (Chalmers)

Stefan Lindskog

Privacy, Intrusion Detection, and Response: Technologies for Protecting Networks

1-39

Areas of Advance

Information and Communication Technology

Transport

Subject Categories

Computer Science

DOI

10.4018/978-1-60960-836-1

ISBN

9781609608361

More information

Created

10/7/2017