Course Description IMT5151 - Intrusion detection and prevention (2005/2006)

After the course, the students should have acquired:
- the mathematical fundament needed to understand intrusion detection and prevention.
- an understanding of applications of misuse based an anomaly based IDS and their limitations.
- an understanding of how an IDS/IPS quality can be assessed and an ability to carry out the assessing process.

IDS definition and classification
Misuse detection systems
Anomaly detection systems
Metrics and test data sets
Measuring IDS performances