7. RAID 2004: Sophia Antipolis, France

@proceedings{DBLP:conf/raid/2004,
  editor    = {Erland Jonsson and
               Alfonso Valdes and
               Magnus Almgren},
  title     = {Recent Advances in Intrusion Detection: 7th International Symposium,
               RAID 2004, Sophia Antipolis, France, September 15-17, 2004. Proceedings},
  booktitle = {RAID},
  publisher = {Springer},
  series    = {Lecture Notes in Computer Science},
  volume    = {3224},
  year      = {2004},
  isbn      = {3-540-23123-4},
  bibsource = {DBLP, http://dblp.uni-trier.de}
}

Modelling Process Behaviour

• Lap-Chung Lam, Tzi-cker Chiueh:
  Automatic Extraction of Accurate Application-Specific Sandboxing Policy. 1-20
  Electronic Edition (link) BibTeX
• Haizhi Xu, Wenliang Du, Steve J. Chapin:
  Context Sensitive Anomaly Monitoring of Process Control Flow to Detect Mimicry Attacks and Impossible Paths. 21-38
  Electronic Edition (link) BibTeX

Detecting Worms and Viruses

• David Dagon, Xinzhou Qin, Guofei Gu, Wenke Lee, Julian B. Grizzard, John G. Levine, Henry L. Owen:
  HoneyStat: Local Worm Detection Using Honeypots. 39-58
  Electronic Edition (link) BibTeX
• Stuart E. Schechter, Jaeyeon Jung, Arthur W. Berger:
  Fast Detection of Scanning Worm Infections. 59-81
  Electronic Edition (link) BibTeX
• Ruiqi Hu, Aloysius K. Mok:
  Detecting Unknown Massive Mailing Viruses Using Proactive Methods. 82-101
  Electronic Edition (link) BibTeX

Attack and Alert Analysis

• Tadeusz Pietraszek:
  Using Adaptive Alert Classification to Reduce False Positives in Intrusion Detection. 102-124
  Electronic Edition (link) BibTeX
• Yi-an Huang, Wenke Lee:
  Attack Analysis and Detection for Ad Hoc Routing Protocols. 125-145
  Electronic Edition (link) BibTeX
• Vinod Yegneswaran, Paul Barford, David Plonka:
  On the Design and Use of Internet Sinks for Network Abuse Monitoring. 146-165
  Electronic Edition (link) BibTeX

Practical Experience

• Jouni Viinikka, Hervé Debar:
  Monitoring IDS Background Noise Using EWMA Control Charts and Alert Information. 166-187
  Electronic Edition (link) BibTeX
• Brian Hernacki, Jeremy Bennett, Thomas Lofgren:
  Symantec Deception Server Experience with a Commercial Deception System. 188-202
  Electronic Edition (link) BibTeX

Anomaly Detection

• Ke Wang, Salvatore J. Stolfo:
  Anomalous Payload-Based Network Intrusion Detection. 203-222
  Electronic Edition (link) BibTeX
• Mizuki Oka, Yoshihiro Oyama, Hirotake Abe, Kazuhiko Kato:
  Anomaly Detection Using Layered Networks Based on Eigen Co-occurrence Matrix. 223-237
  Electronic Edition (link) BibTeX
• Yinglian Xie, Hyang-Ah Kim, David R. O'Hallaron, Michael K. Reiter, Hui Zhang:
  Seurat: A Pointillist Approach to Anomaly Detection. 238-257
  Electronic Edition (link) BibTeX

Formal Analysis for Intrusion Detection

• Avrim Blum, Dawn Xiaodong Song, Shobha Venkataraman:
  Detection of Interactive Stepping Stones: Algorithms and Confidence Bounds. 258-277
  Electronic Edition (link) BibTeX
• Tao Song, Calvin Ko, Jim Alves-Foss, Cui Zhang, Karl N. Levitt:
  Formal Reasoning About Intrusion Detection Systems. 278-295
  Electronic Edition (link) BibTeX
• Ashish Gehani, Gershon Kedem:
  RheoStat: Real-Time Risk Management. 296-314
  Electronic Edition (link) BibTeX