IDS Reading List

A collection of important intrusion detection papers (Last update: July 2006)

Guofei Gu


General and Theoretical Background

Misuse Detection Technique

Host-based Anomaly Detection Technique

Network-based Anomaly Detection Technique

IDS Performance (high speed)

IDS architecture

 Alert Correlation

IDS Measurement and Evaluation

IDS Evasion

Automatic Worm Signature Generation


Worm Modelling, Detection and Response

Some other reading lists