2. RAID 1999: West Lafayette, Indiana, USA

Session 1

• Christina Yip Chung, Michael Gertz, Karl N. Levitt:
  Misuse Detection in Database Systems Through User Profiling.
  Electronic Edition (link) BibTeX
• Christopher Wee:
  Audit logs: to keep or not to keep?
  Electronic Edition (link) BibTeX

Session 2: Agent-based Detection Systems

• Jose Duarte de Queiroz, Luiz F. Rust da Costa Carmo, Luci Pirmez:
  Micael: An Autonomous Mobile Agent System to Protect New Generation Networked Applications.
  Electronic Edition (link) BibTeX
• Peter Mell, Mark McLarnon:
  Mobile Agent Attack Resistant Distributed Hierarchical Intrusion Detection Systems.
  Electronic Edition (link) BibTeX
• Eugene H. Spafford, Diego Zamboni:
  New directions for the AAFID architecture.
  Electronic Edition (link) BibTeX

Session 3: Knowledge Engineering and IDS

• Wenke Lee, Salvatore J. Stolfo:
  Combining Knowledge Discovery and Knowledge Engineering to Build IDSs.
  Electronic Edition (link) BibTeX
• Stefanos Manganaris, Marvin Christensen, Dan Zerkle, Keith Hermiz:
  A Data Mining Analysis of RTID Alarms.
  Electronic Edition (link) BibTeX
• Richard J. Feiertag, Stuart Staniford-Chen, Karl N. Levitt, Mark Heckman, Dave Peticolas, Rick Crawford, Lee Benzinger, Sue Rho, Stephen Wu:
  Intrusion Detection Inter-component Adaptive Negotiation.
  Electronic Edition (link) BibTeX
• Andreas Wespi, Hervé Debar:
  Building an Intrusion-Detection System to Detect Suspicious Process Behavior.
  Electronic Edition (link) BibTeX

Session 4: IDS and Law

• Glenn Mansfield:
  Towards trapping wily intruders in the large.
  Electronic Edition (link) BibTeX

Session 5: Standards, Assessment, and Lessons Learned

• Vern Paxson:
  Defending against network IDS evasion.
  Electronic Edition (link) BibTeX
• Stuart Staniford-Chen:
  IDS Standards: Lessons Learned to Date.
  Electronic Edition (link) BibTeX
• Richard Lippmann, Robert K. Cunningham, David J. Fried, Isaac Graf, Kris R. Kendall, Seth E. Webster, Marc A. Zissman:
  Results of the DARPA 1998 Offline Intrusion Detection Evaluation.
  Electronic Edition (link) BibTeX
• Tim Farley:
  Lessons Learned in Commercial IDS Development.
  Electronic Edition (link) BibTeX
• Terrence Champion, Robert Durst:
  Air Force Intrusion Detection System Evaluation Environment.
  Electronic Edition (link) BibTeX

Session 6: Vulnerability Definitions

• Dug Song, G. Shaffer, M. Undy:
  Nidsbench - a Network Intrusion Detection Test Suite.
  Electronic Edition (link) BibTeX
• Matt Bishop:
  Vulnerability Analysis: An Extended Abstract.
  Electronic Edition (link) BibTeX
• David W. Baker, Steven M. Christey, William H. Hill, David E. Mann:
  The Development of a Common Vulnerability Enumeration.
  Electronic Edition (link) BibTeX

Session 7: Overarching Concerns

• Emilie Lundin, Erland Jonsson:
  Privacy vs. Intrusion Detection Analysis.
  Electronic Edition (link) BibTeX
• Stefan Axelsson:
  On a Difficulty of Intrusion Detection.
  Electronic Edition (link) BibTeX
• Christopher Ting, Tiang Hwee Ong, Yong Tai Tan, Pek Yong Ng:
  Intrusion Detection, Internet Law Enforcement and Insurance Coverage to Accelerate the Proliferation of Internet Business Singapore.
  Electronic Edition (link) BibTeX
• David Gorman, Mary Ruhl:
  Intrusion Detection for Telephony Signalling.
  Electronic Edition (link) BibTeX
• John Kelsey, Bruce Schneier:
  Minimizing Bandwidth for Remote Access to Cryptographically Protected Audit Logs.
  Electronic Edition (link) BibTeX

Session 8

• Alexandr Seleznyov, Seppo Puuronen:
  Anomaly Intrusion Detection Systems: Handling Temporal Relations Between Events.
  Electronic Edition (link) BibTeX
• Richard Lippmann, Robert K. Cunningham:
  Improving Intrusion Detection Performance using Keyword Selection and Neural Networks.
  Electronic Edition (link) BibTeX
• Yves Cosendai, Marc Dacier, Paolo Scotton:
  Intrusion Detection Mechanism to Detect Reachability Attacks in PNNI Networks.
  Electronic Edition (link) BibTeX
• Qianli Zhang, Xing Li:
  Session State Transition Based Large Network IDS.
  Electronic Edition (link) BibTeX
• Pars Mutaf:
  Defending against a Denial-of-Service Attack on TCP.
  Electronic Edition (link) BibTeX

Session 9

• Jim Yuill, Shyhtsun Felix Wu, Fengmin Gong, Ming-Yuh Huang:
  Intrusion Detection for an On-Going Attack.
  Electronic Edition (link) BibTeX
• Jeff Rowe:
  Intrusion Detection and Isolation Protocol: Automated Response to Attacks.
  Electronic Edition (link) BibTeX
• Aaron Schwartzbard, Anup K. Ghosh: A Study in the Feasibility of Performing Host-Based Anomaly Detection on Windows NT. BibTeX

Session 10

• Tiang Hwee Ong, Chung Pheng Tan, Yong Tai Tan, Christopher Ting:
  SNMS - Shadow Network Management System.
  Electronic Edition (link) BibTeX