PhD Qualifying Examination "A Survey of Intrusion Detection Systems and Approaches to Performance Improvement" By Mr. Kin-Fai Ip Abstract: Information security is drawing unprecedented attention in both academic and commercial sectors. There have been multi-disciplinary research successes in many aspects of information security. However, in the area of network security, advances in effective detection and prevention of attacks are still unsatisfactory. After Gartner's report on Information Security Hype Cycle 2003 stating that the intrusion detection system hype is alreadyobsolete, the industry has demanded a more effective, efficient and accurate methodology for intrusion detection and response. This survey starts with a review of the current approaches of intrusion detection systems. It then continues with a proposed approach to address the challenges of intrusion detection systems, including false positive rate, false negative rate, efficiency and the ability to detect novel attacks. Approaches to improve the overall performance of intrusion detection systems are discussed, including machine learning techniques as well as correlation techniques for aggregating the outputs from multiple sensors. Date: Wednesday, 28 January 2004 Time: 2:00p.m.-4:00p.m. Venue: Room 2302 lifts 17-18 Committee Members: Prof. Dit-Yan Yeung (Supervisor) Prof. Cunsheng Ding (Chairperson) Prof. Shing-Chi Cheung Prof. Helen Shen **** ALL are Welcome ****