Showing papers by "Richard P. Lippmann published in 2003"
11 Jul 2003
TL;DR: The types of performance measurements that are desired and that have been used in the past are explored and suggestions for research directed toward improving the measurement capabilities are presented.
Abstract: While intrusion detection systems are becoming ubiquitous defenses in today's networks, currently we have no comprehensive and scientifically rigorous methodology to test the effectiveness of these systems. This paper explores the types of performance measurements that are desired and that have been used in the past. We review many past evaluations that have been designed to assess these metrics. We also discuss the hurdles that have blocked successful measurements in this area and present suggestions for research directed toward improving our measurement capabilities.
175 citations