Thesis (M.S. in Computer Science)--Naval Postgraduate School, June 2003. / Thesis advisor(s): James Bret Michael, John McEachen. Also available online.

Photocopy of typescript. / Digitized by Kansas Correctional Industries

Thesis ((MEng(ElectroSys))--University of South Australia, 1999

Call number: LD2668 .T4 1979 F63 / Master of Science

Typescript (photocopy). / Digitized by Kansas Correctional Industries

Approved for public release, distribution is unlimited / One of the most significant challenges with modern intrusion detection systems is the high rate of false alarms that they generate. In order to lower this rate, we propose to reduce the amount of traffic sent a given intrusion detection system via a filtering process termed stream splitting. Each packet arriving at the system is treated as belonging to a connection. Each connection is then assigned to a network stream. A network stream can then be sent to an analysis engine tailored specifically for that type of data. To demonstrate a stream-splitting capability, both an extendable multi-threaded architecture and prototype were developed. This system was tested to ensure the ability to capture traffic and found to be able to do so with minimal loss at network speeds up to 20 Mb/s, comparable to several open-source analysis programs. The stream splitter was also shown to be able to correctly implement a traffic separation scheme. / Ensign, United States Navy

Thesis. 1977. M.S.--Massachusetts Institute of Technology. Dept. of Electrical Engineering and Computer Science. / MICROFICHE COPY AVAILABLE IN ARCHIVES AND ENGINEERING. / Includes bibliographical references. / M.S.