1177539281 carrie_gates_sm.jpg Testing Anomaly Detection Systems Speaker: Dr. Carrie Gates, Research Staff Member, CA Labs

Time and Place: April 25 12:30pm - 2:00pm. Rogers Hall 227

Presentation abstract: Anomaly detection has been widely used as a basis for many network intrusion detection systems. However, anomalies themselves have not been well-defined, and no research has been performed to determine how security events of interest are actually related to anomalous behavior. Additionally, little research has been done in the general area of testing anomaly-based detection systems, resulting in systems that have been tested using poor, out-dated data sets or locally-collected network traffic with unknown characteristics. In this presentation I will introduce some of the previous research in anomaly detection, detailing the larger research questions that have arisen from this work. I will focus in particular on the issues involved in testing anomaly detection systems, presenting some initial results from my own research in this area. bio