The most common shortcomings in the existing intrusion detection systems (IDSs) are information
overload, unknown attacks, false positives and false negatives. We present the design …

We analyzed the core ideas of three basic string matching algorithms (KMP, BM, DFA),
described the principles of five advanced online multi-pattern matching algorithms (AC, RAC, …

Currently, risk assessment has been an effective technology of protecting network
information system. In order to achieve more accurate result, a new assessment approach is …

In recent years, Internet-scale worm incidents occurred many times. People wonder at the
speediness of the worm spread and the severe damage to the Internet. So people began to …

Traditional network threat situational assessment is based on raw alerts, not combined with
contextual information, which influences the accuracy of assessment. In this paper, we …

Background Abstract In the field of network risk assessment, to enhance the accuracy of
assessment, the connectivity between network nodes has been introduced to many studies. …

Background Abstract Mitigating Distributed Denial-of-Service (DDoS) attacks becomes
more challenging with increasing available resources and techniques for attackers. Current …

Background Abstract Internet is an open network environment, large-scale distributed
malicious behaviors is increasing day by day on the internet. Potential relationships may exist …

A MINING METHOD FOR COMPUTER VULNERABILITY CORRELATION Yong-Zheng
Zhang Xiao-Chun Yun, Bin-Xing Fang Tao Zhang Received July 200 … Xiao-Chun Yun, Bin-Xing …

Abstract: The performance bottleneck of the traditional networkintrusion detection system (NIDS)
is investigated in order to design and implement a high-performance distributed …