Panacea: Automating attack classification for anomaly-based network intrusion detection systems

Abstract

Anomaly-based intrusion detection systems are usually criticized because they lack a classification of attacks, thus security teams have to manually inspect any raised alert to classify it. We present a new approach, Panacea, to automatically and systematically classify attacks detected by an anomaly-based network intrusion detection system. © 2009 Springer Berlin Heidelberg.