SSTC 2004 CD-ROM - Presentation Information


Using Data Mining for Intrusion Detection and Attack Anticipation	Thursday Presentation

This presentation examines data mining techniques to improve intrusion detection and to provide attack anticipation. This presentation discusses techniques for identifying vulnerable target systems and types of malicious code, for mitigating security risks, and for recognizing attack patterns. It also presents the conceptual and operational tools necessary for analysis and resolution of problems with respect to effective filters and firewalls, attack tracing, system recovery, evidence collection, evidence analysis, and prosecution. It concludes with a discussion of the use of data mining techniques to predicted new and novel attack patterns and to provide intrusion prevention. Key issues analyzed are: 1) principles of intrusion detection and computer forensics, 2) understand techniques for identifying key systems vulnerabilities, 3) techniques for mitigating security risk, 4) methods and techniques for recognizing attack patterns, 5) tools for analysis and resolution of problems with filters and firewalls, 6) methods of attack tracing, evidence collection, and evidence analysis.

Thursday - April 22, 2004 11:10 - 11:55	Track 1 Salon G

*Speakers:*
Dr. Michael L . Martin

*Presentation:* Using Data Mining for Intrusion Detection and Attack Anticipation

Using Data Mining for Intrusion Detection and Attack Anticipation