An Overview of Intrusion Detection

1
An Overview of Intrusion Detection
Countermeasure Systems Research DirectionsPart
II

• Fernando C. Colon Osorio
• Computer Science Department
• Worcester, MA 01609

2
Outline

• Previous Talk what did we cover last?
• Definitions
• A Model of an Intrusion
• Basic Approaches
• Critical research Problems
• PEDS Part II
• S.A.F.E Architecture
• S.A.F.E. approach to critical research problems
• Other Related topics
• Conclusions

3
Intrusion Detection System Definition

• Formal Definition 10, 11
• Intrusion Detection (ID) is the problem of
  identifying individuals who are using, or
  attempting to use a computer system without
  authorization (i.e., crackers) and those who have
  legitimate access to the system but are abusing
  their privileges (i.e., the insider threat).

4
Intrusion Timeline

• System is Secure/Dependable

System is Secure/Dependable
Œ