An Experimentation Workbench For Intrusion Detection Systems

        To compare existing intrusion detection solutions, an experimentation workbench has been developed at the IBM Zurich Research Laboratory. We focus here on its design principles and implementation. This paper is intended to make other teams working in the intrusion detection arena aware of the existence of such a workbench. Thus we hope to foster interaction with them to perform further experiments in the near future.

By: H. Debar, M. Dacier, A. Wespi, S. Lampart

Published in: RZ2998 in 1998

LIMITED DISTRIBUTION NOTICE:

This Research Report is available. This report has been submitted for publication outside of IBM and will probably be copyrighted if accepted for publication. It has been issued as a Research Report for early dissemination of its contents. In view of the transfer of copyright to the outside publisher, its distribution outside of IBM prior to publication should be limited to peer communications and specific requests. After outside publication, requests should be filled only by reprints or legally obtained copies of the article (e.g., payment of royalties). I have read and understand this notice and am a member of the scientific community outside or inside of IBM seeking a single copy only.

rz2998.ps

;

rz2998.ps.Z

Questions about this service can be mailed to reports@us.ibm.com .