Developing smart embedded host-based intrusion detection systems

在许多地方，计算机入侵是一个主要问题。据估计，2008年，网络犯罪给全球企业造成了1万亿美元的损失。许多严重的网络攻击，包括网络间谍活动，不会产生大量的网络流量，可以很容易地穿透基于网络的入侵检测系统(NID)。此类攻击通常试图危害单个主机，因此最好在主机级别检测到它们。我们的目标是设计创新的基于主机的入侵检测系统，作为对网络入侵检测系统的补充，以解决这个问题。该项目的成果将增强澳大利亚抵御犯罪分子和恐怖分子对澳大利亚联网关键基础设施攻击的能力，并提高澳大利亚信息技术产业的全球竞争力。

Computer intrusion is a major concern in many places. It is estimated that cybercrime cost firms US$1 trillion globally in 2008. Many serious cyber attacks, including cyber espionage, do not generate significant network traffic and can easily penetrate network-based intrusion detection systems (NIDS). Such attacks often attempt to compromise individual hosts and hence they are best detected at the host level. We aim to design innovative host-based IDS, as a complement to the NIDS, to address this issue. The outcomes of this project will strengthen the national capability to resist attacks by criminals and terrorists on Australian networked critical infrastructures and also enhance the global competitiveness of Australia’s information technology industry.