> In the first half of the talk, I'll briefly overview categories of
> intrusions, examples of how they work, some general techniques of
> intrusion detection, and open issues.   The second half of the talk will
> focus on case studies of intrusion detection and analysis.
>
> Papers that I will talk about:
>
> 1. Storage-based Intrusion Detection: Watching Storage Activities for
> Suspicious Behavior
> 	http://www.pdl.cmu.edu/PDL-FTP/Secure/usenix03.pdf
>
> 2. Backtracking Intrusions
> 	http://www.cs.rochester.edu/sosp2003/papers/p190-king.pdf
>
> 3. Inferring Internet Denial-of-Service Activity
> 	http://www.usenix.org/events/sec01/moore.html
>
> 4. How to Own the Internet in Your Spare Time
> 	http://www.icir.org/vern/papers/cdc-usenix-sec02/index.html
>
> 5. Locality: A New Paradigm for Thinking about Normal Behavior and
> Outsider Threat
> 	http://www.ece.cmu.edu/%7Edawnsong/teaching/f03/reading/locality.pdf