On the Detection and Origin Identification of Slow-Paced Attacks in Forensic Investigation

博士 === 國立臺灣大學 === 電機工程學研究所 === 101 === A slow-paced attack, such as slow worm or bot, can remain undetectable indefinitely by slowing down the pace of its movement. Detecting slow attacks based on traditional anomaly detection techniques may yield high false alarm rates. Moreover, the long lifespan...

Full description

Bibliographic Details
Main Authors: Li-Ming Chen, 陳力銘
Other Authors: Wanjiun Liao
Format: Others
Language:en_US
Published: 2013
Online Access:http://ndltd.ncl.edu.tw/handle/34688492506716645515