BARTON P MILLER
Pilots at Owen Dr, Madison, WI
License number
Wisconsin A1292291
Issued Date
Apr 2015
Expiration Date
Apr 2016
Category
Airmen
Type
Authorized Aircraft Instructor
Address
Address
454 S Owen Dr, Madison, WI 53711
Professional information
Systems And Methods For Testing And Evaluating An Intrusion Detection System
US Patent:
2006025, Nov 9, 2006
Filed:
Dec 5, 2005
Appl. No.:
11/294585
Inventors:
Shai Rubin - Madison WI, US
Somesh Jha - Madison WI, US
Barton Miller - Madison WI, US
Somesh Jha - Madison WI, US
Barton Miller - Madison WI, US
International Classification:
G06F 12/14
US Classification:
726023000
Abstract:
Systems, methods and devices according to this invention include a plurality of defined modification rules for modifying a sequence of packets that form an attack on an intrusion detection system. These modification rules include both rules that expand the number of packets and rules that reduce the number of packets. The reducing rules can be applied to a given attack instance to identify one or more root attack instances. The expanding rules can then be applied to each root attack instance to generate a corpus of modified attack instances. The modification rules can preserve the semantics of the attack, so that any modified attack instance generated from the given attack instance remains a true attack. To test an intrusion detection system, the corpus of modified attack instances can be used to determine whether an intrusion detection system detects every modified attack instance.
Network Intrusion Detector With Combined Protocol Analyses, Normalization And Matching
US Patent:
8220048, Jul 10, 2012
Filed:
Aug 21, 2006
Appl. No.:
11/507109
Inventors:
Shai Aharon Rubin - Madison WI, US
Somesh Jha - Madison WI, US
Barton Paul Miller - Madison WI, US
Somesh Jha - Madison WI, US
Barton Paul Miller - Madison WI, US
Assignee:
Wisconsin Alumni Research Foundation - Madison WI
International Classification:
H04L 29/06
US Classification:
726 22, 713188
Abstract:
A network intrusion detection system combines the normally sequential steps of protocol analysis, normalization, and signature matching through the use of a regular expression to speed the monitoring of network data. The regular expression also allows the creation of a superset matcher, permitting multiple stages of matching of increased accuracy to produce additional throughput gains.