]> Our vision of an intrusion detection system is one where the "system" encompasses the entire enterprise and where intrusion detection is a distributed and collaborative process involving the entities within the enterprise. We view an entity as any computational device to include computers, servers, switches, and routers and where intrusion detectors are comprised of both anomaly and signature detectors that communicate with each other. We have initiated work toward realizing our vision and have achieved positive results by using a two-stage process for host based anomaly detection.

We conduct IDS related research in wired, moble-adhoc, wireless, and sensor network environments.

]]> 2002-05-01T00:00:00-05:00 2004-08-01T00:00:00-05:00 2003-12-30T00:00:00-05:00 2003-11-30T00:00:00-05:00 2003-10-12T00:00:00-05:00 2003-09-01T00:00:00-05:00 2003-07-31T00:00:00-05:00 2003-05-01T00:00:00-05:00 2003-04-30T00:00:00-05:00 2002-10-09T00:00:00-05:00 2002-09-12T00:00:00-05:00 2002-08-12T00:00:00-05:00 2001-08-12T00:00:00-05:00