Characterizing the Modification Space of Signature IDS Rules

Ryan Guide, Eric Pauley, Yohan Beugin +2

Signature-based Intrusion Detection Systems (SIDSs) are traditionally used to detect malicious activity in networks. A notable example of such a system is Snort, which compares net…