Measuring Inconsistency in a Network Intrusion Detection Rule Set Based on Snort

Abstract

In this preliminary study, we investigate how inconsistency in a network intrusion detection rule set can be measured. To achieve this, we first examine the structure of these rules which are based on Snort and incorporate regular expression (Regex) pattern matching. We then identify primitive elements in these rules in order to translate the rules into… (More)
DOI: 10.1142/S1793351X11001274

Topics

Figures and Tables

Sorry, we couldn't extract any figures or tables for this paper.

Statistics

01020201520162017
Citations per Year

Citation Velocity: 5

Averaging 5 citations per year over the last 3 years.

Learn more about how we calculate this metric in our FAQ.

Slides referencing similar topics