Publications

Machine Learning and Data Mining for Computer Security
Methods and Applications
Series: Advanced Information and Knowledge Processing
2006, XVI, 210 p. 23 illus., Hardcover
ISBN: 1-84628-029-X
Springer, London

"Machine Learning and Data Mining for Computer Security" provides an overview of the current state of research in machine learning and data mining as it applies to problems in computer security. The first part surveys the data sources, the learning and mining methods, evaluation methodologies, and past work relevant for computer security. The second part consists of articles written by the top researchers working in this area. These articles deal with topics of host-based intrusion detection through the analysis of audit trails, of command sequences and of system calls as well as network intrusion detection through the analysis of TCP packets and the detection of malicious executables.