Identification of host audit data to detect attacks on low-level IP vulnerabilities
Thomas E. Daniels, Eugene Howard Spafford · Journal of Computer Security · 1999
Conventional host-based and network-based intrusion and misuse detection systems have concentrated on detecting network-based and internal attacks, but little work has addressed host-based detection of low-level network attacks. A major reason for th