next up previous
Next: Cold start Up: Network Intrusion Detection: Evasion, Previous: Normalization Tradeoffs

Real-world Considerations

Due to the adversarial nature of attacks, for security systems it is particularly important to consider not only the principles by which the system operates, but as much as possible also the ``real world'' details of operating the system. In this section, we discuss two such issues, the ``cold start'' problem, and attackers targeting the normalizer's operation.


Vern Paxson