Intrusion Detection Methods - Achademic Papers Required

On Mon, 19 Jan 2004 22:25:29 -0000, "David Norris"
<> wrote:

>Hi, I was wondering whether anyone knows where I can get some
academic
>papers relating to this topic? As it's fairly specialised, I think I
have
>found all I can using search engines alone.
>I am working on a project as part of my dissertation - some details
are
>available here:
>
>Main file listing: http://80.4.4.163/IPGateKeeper/protocol/htm where
>protocol = http, ftp, telnet, ntp, netbios-ns, tftp...
>
>
>Port statistics file: http://80.4.4.163/IPGateKeeper/Statistics.htm
>
>Port history: http://80.4.4.163/IPGateKeeper/history.htm
>
>TCP/UDP endpoint history: http://80.4.4.163/IPGateKeeper/status.htm
>(updated occasionally).

www.robergraham.com and www.whitehats.com have some good info. Also
look into http://www.honeynet.org/ Honeypots and their deployment is
closely tied to IDS, as is development of IDS and IPS.

Feel free to pick my brain if you like.

Sponge
Sponge's Secure Solutions
www.geocities.com/yosponge
My new email: yosponge2 att yahoo dott com

sponge