Heuristics for Large Scale Intrusion Detection
Ed Amoroso, Chief Technical Officer, AT&T Information Security Office, USAKeynote Presentation - Friday 3 November 2000
A collection of practical heuristics on large-scale intrusion detection is offered. Each heuristic is derived from field experiences designing, deploying, testing, and operating intrusion detection infrastructure. Comments on the general applicability of the heuristics are included in the presentation.
Biography: During his 13-year career with AT&T Dr Ed Amoroso has been involved in a variety of computer and network projects. He is currently involved in Internet security consultation and engineering for AT&T customers, and for many of the company's internal services and e-commerce offers. Ed is also the technical lead on major on-going R&D effort within AT&T, in the area of perimeter intrusion detection and cracker activity surveillance.
