@inproceedings{HolzMeierKoenig, author = {Holz, Thomas and Meier, Michael and K{\"o}nig, Hartmut}, title = {High-efficient intrusion detection infrastructure}, series = {Real time intrusion detection, papers presented at the RTO Information Systems Technology Panel (IST) Symposium, held in Estoril, Portugal, 27 - 28 May 2002}, booktitle = {Real time intrusion detection, papers presented at the RTO Information Systems Technology Panel (IST) Symposium, held in Estoril, Portugal, 27 - 28 May 2002}, publisher = {NATO Research and Technology Organisation}, address = {Neuilly-sur-Seine}, isbn = {92-837-0032-5}, pages = {14/1 -- 14/12}, language = {en} } @inproceedings{HolzMeierKoenig, author = {Holz, Thomas and Meier, Michael and K{\"o}nig, Hartmut}, title = {An Efficient Intrusion Detection System Design}, series = {Proceedings of the ISSA 2002 Information for Security for South-Africa 2nd Annual Conference, 10-12 July 2002, Misty Hills Country Hotel, Muldersdrift, Gauteng, South Africa}, booktitle = {Proceedings of the ISSA 2002 Information for Security for South-Africa 2nd Annual Conference, 10-12 July 2002, Misty Hills Country Hotel, Muldersdrift, Gauteng, South Africa}, pages = {12}, language = {en} } @article{HolzMeierKoenig, author = {Holz, Thomas and Meier, Michael and K{\"o}nig, Hartmut}, title = {Bausteine f{\"u}r effiziente Intrusion-Detection-Syteme}, language = {de} } @inproceedings{MeierBischofHolz, author = {Meier, Michael and Bischof, Niels and Holz, Thomas}, title = {SHEDEL - A Simple Hierarchical Event Description Language for Specifying Attack Signatures}, series = {Security in the information society, IFIP TC11 17th, International Conference on Information Security (SEC2002) May, 7 - 9, 2002, Cairo, Egypt}, booktitle = {Security in the information society, IFIP TC11 17th, International Conference on Information Security (SEC2002) May, 7 - 9, 2002, Cairo, Egypt}, publisher = {Kluwer}, address = {Boston [u.a.]}, isbn = {1-402-07030-6}, pages = {559 -- 571}, language = {en} } @incollection{HolzMeierKoenig, author = {Holz, Thomas and Meier, Michael and K{\"o}nig, Hartmut}, title = {High-Efficient Intrusion Detection Infrastructure}, language = {en} } @inproceedings{Meier, author = {Meier, Michael}, title = {A model for the semantics of attack signatures in misuse detection systems}, isbn = {3-540-23208-7}, language = {en} } @misc{MeierFlegelKoenig, author = {Meier, Michael and Flegel, Ulrich and K{\"o}nig, Hartmut}, title = {Reactive Security - Intrusion Detection, Honeypots, and Vulnerability Assessment}, series = {Praxis der Informationsverarbeitung und Kommunikation}, volume = {27}, journal = {Praxis der Informationsverarbeitung und Kommunikation}, number = {4}, pages = {186 -- 187}, language = {de} } @inproceedings{MeierSchmerlKoenig, author = {Meier, Michael and Schmerl, Sebastian and K{\"o}nig, Hartmut}, title = {Improving the efficiency of misuse detection}, series = {Detection of intrusions and malware, and vulnerability assessment, second international conference, DIMVA 2005, Vienna, Austria, July 7-8, 2005, proceedings}, booktitle = {Detection of intrusions and malware, and vulnerability assessment, second international conference, DIMVA 2005, Vienna, Austria, July 7-8, 2005, proceedings}, editor = {Julisch, Klaus}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {3-540-26613-5}, pages = {S. 188}, language = {en} } @inproceedings{MeierSchmerl, author = {Meier, Michael and Schmerl, Sebastian}, title = {Effiziente Analyseverfahren f{\"u}r Intrusion-Detection Systeme}, series = {Sicherheit 2005, Sicherheit, Schutz und Zuverl{\"a}ssigkei, 5. - 8. April 2005 in Regensburg, 2. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft f{\"u}r Informatik e.V.}, booktitle = {Sicherheit 2005, Sicherheit, Schutz und Zuverl{\"a}ssigkei, 5. - 8. April 2005 in Regensburg, 2. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft f{\"u}r Informatik e.V.}, editor = {Federrath, Hannes}, publisher = {Ges. f{\"u}r Informatik}, address = {Bonn}, isbn = {3-88579-391-1}, pages = {209 -- 220}, language = {de} } @inproceedings{SchmerlMeierKoenigetal., author = {Schmerl, Sebastian and Meier, Michael and K{\"o}nig, Hartmut and Flegel, Ulrich}, title = {Simplifying Signature Engineering by Reuse}, series = {Emerging trends in information and communication security, ETRICS 2006, Freiburg, Germany, June 6 - 9, 2006 Conference, Freiburg, Germany, June 2006}, booktitle = {Emerging trends in information and communication security, ETRICS 2006, Freiburg, Germany, June 6 - 9, 2006 Conference, Freiburg, Germany, June 2006}, editor = {M{\"u}ller, G{\"u}nter}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {3-540-34640-6}, pages = {436 -- 450}, language = {en} } @inproceedings{SchmerlFlegelMeier, author = {Schmerl, Sebastian and Flegel, Ulrich and Meier, Michael}, title = {Vereinfachung der Signaturentwicklung durch Wiederverwendung}, editor = {Dittmann, Jana}, language = {de} } @misc{MeierFlegelSchmerl, author = {Meier, Michael and Flegel, Ulrich and Schmerl, Sebastian}, title = {Efficiency Issues of Rete-based, Expert Systems for Misuse Detection}, series = {Proceedings, Twenty-Third Annual Computer Security Applications Conference, ACSAC 2007, 10 - 14 December 2007, Miami Beach, Florida}, journal = {Proceedings, Twenty-Third Annual Computer Security Applications Conference, ACSAC 2007, 10 - 14 December 2007, Miami Beach, Florida}, publisher = {IEEE Computer Society}, address = {Los Alamitos, Calif.}, isbn = {978-0-7695-3060-4}, pages = {151 -- 160}, language = {en} } @inproceedings{SchmerlKoenigFlegeletal., author = {Schmerl, Sebastian and K{\"o}nig, Hartmut and Flegel, Ulrich and Meier, Michael and Rietz, Ren{\´e}}, title = {Systematic Signature Engineering by Re-use of Snort Signatures}, series = {Proceedings of the 24th International Annual Computer Security Applications Conference (ACSAC 2008), Anaheim, California, USA, December 2008}, booktitle = {Proceedings of the 24th International Annual Computer Security Applications Conference (ACSAC 2008), Anaheim, California, USA, December 2008}, pages = {23 -- 32}, language = {en} }