Quantifying the effectiveness of intrusion detection systems in operation through domain experts
(English)Article in journal (Other academic) Submitted
An intrusion detection system is a security measure that can help system administrators in enterprise environments to detect attacks made against networks and their hosts. Evaluating the effectiveness of IDSs by experiments or observations is however difficult and costly. This paper describes the result of a study where 165 domain experts in the intrusion detection field estimated the effectiveness of 24 different scenarios pertaining to detection of remote arbitrary code exploits.
IdentifiersURN: urn:nbn:se:kth:diva-103688OAI: oai:DiVA.org:kth-103688DiVA: diva2:561242
QS 20122012-10-172012-10-172012-11-20Bibliographically approved