Firewalls: Re: Intrusion detection and AI systems

Firewalls
(August 1994)

Indexed By Thread: [Previous] [Next]

Subject:	Re: Intrusion detection and AI systems
From:	Brent Chapman <brent @ mycroft . GreatCircle . COM>
Date:	Mon, 01 Aug 1994 23:40:45 -0700
To:	reh @ cs . UMD . EDU (Richard Huddleston)
Cc:	firewalls @ greatcircle . com
In-reply-to:	Your message of Tue, 2 Aug 1994 00:40:55 -0400

reh @
 cs .
 UMD .
 EDU (Richard Huddleston) writes:

# This seems like it might be a useful approach to dealing with subtle and/or
# complex attacks, but maybe I've just got sand in my head.  In the now-classic

Jeez, it's barely been out for 3 months!  

# _Firewalls and Internet Security_, Bill Cheswick and Steve Bellovin pretty 
# much write off the usefulness of AI systems in detection.  I wasn't able
# to locate any papers exploring the subject, however.  Does anyone know 
# which AI systems have been considered for use, and why they were discarded? 

I believe that SRI has sponsored an "Intrusion Detection Workshop" for
the past several years; that's certainly literature that you should
examine.  It's a very difficult problem.


-Brent
--
Brent Chapman         | Great Circle Associates  | Call or email for info about
Brent @
 GreatCircle .
 COM | 1057 West Dana Street    | upcoming Internet Security 
+1 415 962 0841       | Mountain View, CA  94041 | Firewalls Tutorial dates

Indexed By Date	Previous:	Re: SATAN audit From: vicki @ cco . caltech . edu (Vicki Brown)
Indexed By Date	Next:	Screening & routers From: padgett @ tccslr . dnet . mmc . com (A. Padgett Peterson, P.E. Information Security)
Indexed By Thread	Previous:	Intrusion detection and AI systems From: reh @ cs . UMD . EDU (Richard Huddleston)
Indexed By Thread	Next:	Screening & routers From: padgett @ tccslr . dnet . mmc . com (A. Padgett Peterson, P.E. Information Security)