Abstract
This paper briefly explores the security threats posed to computer networks worldwide and provides an overview of how and why Intrusion Detection Protocol (IDP) is a valuable tool to combat security threats. The paper relates that IDP techniques will allow network administrators the tools necessary to harden their networks, thereby protecting personal, business, and global computer networks and resources.

From the Paper
"Said dependence has made laptops, iPods, personal websites (such as facebook and myspace), E-mail, electronic marketing, and cellphones part of our everyday life. While one could certainly argue about the upside in all these advents in making us increasingly global, it also makes us vulnerable in ways that we have not been before.
"Myspace pages, for instance, get phished, leaving us socially and professionally vulnerable."

Tags:botnet worms dependent facebook, protocol anomaly detection

Abstract
This paper briefly explores the security threats posed to computer networks worldwide and provides an overview of how and why Intrusion Detection Protocol (IDP) is a valuable tool to combat security threats.

Tags:intrusion, detection, protocol

Abstract
This paper provides three short essays that relate to the topic of mystery and detection novels and film noir. The paper looks at the hard boiled detective found in these genres. The paper refers to the work of Raymond Chandler, Dashiel Hammett, Walter Mosley and others, as well as to select films.

From the Paper
"The novels of Raymond Chandler, hard-boiled detective fiction in the vein of Dashiel Hammett focus on the experiences of detective Philip Marlowe. If Chandler's novels featuring Marlowe like "The Big Sleep" have a moral, the moral appears to be that there are intelligent and stupid criminals and law enforcement officials and those that are the most intelligent usually wind up victorious."

Tags:Raymond Chandler, film noir, Dashiel Hammett, Walter Mosley, Ross MacDonald, hard boiled detective, myth of America

Abstract
In this article, the writer notes that bioterrorism is potentially one of the deadlier forms of terrorism because it can be silently introduced amidst large populations to cause untold health problems or large numbers of fatalities as well as create a world-wide panic. The writer maintains that the key to effectively managing and coordinating a biological incident would be early detection and a timely response. The writer then reviews the various detection methods and devices used in biological agent detection and sensing and notes that much progress has been made in the development of these devices however, there is much progress to be made in the future. The writer concludes that enabling health care workers and emergency responders to test the biological agent exposure early in the process of a crisis holds great promise for early detection and eradication of biological agent exposure for the public-at-large in an event or crisis involving biological warfare agents.

Outline:
Abstract
Introduction
Biological Detection Equipment
Bio-Detection Process: A Four-Step Process
Sampler/Collector Types
Two Types of Triggers in Bio-Sensing Technologies
Flow Cytometry
Crisis Management
Summary and Conclusion

From the Paper
"The devices are becoming increasingly less expensive and simple to use however, initiatives underway for development of newer devices that are less expensive hold promise in the near future for biological sensing and detection. While the Department of Defense has set out guidelines for Emergency Responders, it is likely that many of the smaller fire departments throughout the country have not yet prepared for this type of crisis. Enabling health care workers and Emergency Responders in testing the biological agent exposure early in the process of a crisis holds great promise for early detection and eradication of biological agent exposure for the public-at-large in an event or crisis involving biological warfare agents."

Tags:eradication, biological, threat, warfare, agent

Abstract
The paper attempts to identify ways in which a website Honeypot can be used as a detection measure or system and to determine its ability to achieve these goals in ways that are superior to other types of intrusion detection systems. The paper provides an overview of intrusion detection systems (IDS), the two primary classifications of honeypots and their respective intended applications and the different types of honeypots. The paper then provides a general discussion concerning the legal issues that affect the use of honeypots that should be taken into account before an organization makes the decision to use this intrusion detection system approach.

Outline:
Chapter 1: Introduction
Chapter 2: Intrusion Detection Systems
Chapter 3: Classification and Types of Honeypots
Chapter 4: Legal Issues Affecting the Use of Honeypots

From the Paper
"By any measure, the Internet has changed the way both consumers and businesses of all types interact and pursue their respective goals. Indeed, the Internet has transformed the way in which people go about the daily lives in some profound ways, but there are some significant problems involved. For example, Elifoglu (2002) points out, "The open nature of the Internet makes security a real challenge for today's companies" (p. 67). Such security issues have assumed even greater importance in recent years as more and more companies establish a Web presence to facilitate their organizational goals."

Tags:security, data, technology, hackers, crackers

Abstract
This paper discusses an intrusion detection algorithm for analyzing university web server log files. It also discusses integrating hierarchical clustering with other algorithms for an intrusion detection system. The paper proposes to use hierarchical clustering as the main back bone of the intrusion detection system and then incorporating other algorithms like statistics and support vector machines (SVM) as needed.

From the Paper
"The initial plan was to use the user signatures method by Seth Freeman or the Traffic Classification technique but the first method seems more suited to an OS than for web server log files and the second seems a lot more complicated and also requires a destination IP, which is not readily available from our log files. I started out by writing a statistics based algorithm but then added hierarchical clustering based on instructor feedback. Eventually I settled on this paper based on hierarchical clustering with other methods as backup although I still like the statistics approach."

Tags:algorithms, tree-like, ids, database, hits

Abstract
The paper compares Intrusion Detection Systems to Intrusion Prevention Systems. Similarities, differences, advantages, and disadvantages are discussed and technical, functional, and market differences are highlighted. The paper shows how each system provides unique benefits and gaps in security and treat detection. The paper recommends that these systems be used in tandem for maximum security.

From the Paper
"From the most local activities such as person-to-person communication to the legal, banking and political activities that shape the world, internet and network data transfer and communications are essential functions of our seamless society. The increased sophistication and complexity of these technologies is matched by the sophistication and complexity of the threats to these systems. Intrusion Detection Systems (IDS) and Intrusion Protection Systems (IPS) have been implemented as security measures to..."

Tags:computer, intrusion, systems

Abstract
This paper studies historical detection, the use of modern technology and advanced psychological techniques to shed additional light on historical occurrences. Based on the book "After the Fact: the Art of Historical Detection" by J.W. Davidson and M.H. Lytle, the paper applies modern psychology and medicine to the examination of the witchcraft scare in the late seventeenth century in New England.

From the Paper
"Later, social historians studied the everyday activities and commerce of the villagers in the area, using records indicating land ownership and places of residence. They found that at the time, some of the inhabitants of the original Old Town Salem had moved to outlying areas and were setting up another village, incurring the animosities of their neighbors. This explanation is dramatically confirmed when a map is used showing the location of the various persons known to have been involved in the cases: the accusers, the defenders and the accused. It was revealed that those accused of being witches and those who accused them lived on opposite ends of the town. Those who defended the accused lived closest to them, and can be presumed to be friends and neighbors. A study of the politics of the region confirms further that financial interests of the villagers were affected by the efforts of some to move out of the village and begin a settlement of their own. These historians believe that this could explain the intensity of the feelings of animosity that culminated in death for some of the accused witches. In the case of the activities of Salem, a contemporary study of historical documents viewed from a perspective of modern education in the fields of medicine, socio-political dynamics and religious studies has uncovered the answer to a question that has puzzled historians for more than two centuries."

Tags:witchcraft, Salem, New, England, psychology, modern, technology, burn, stake

Abstract
This paper discusses the various methods of lie detection. The paper examines the psychophysiological methods, such as the polygraph, and non-physiological methods, such as emotional cues, cognitive cues, and facial expressions. The legal aspects of lie detection tests are explored in the paper, including the extent of their credibility.

From the Paper
"Lying and deception can have serious consequences in law enforcement and courtroom proceedings. Thus, forensic psychologists have devoted much effort to developing methods and techniques for detecting lies. Unfortunately, research indicates that the majority of people, including those working in law enforcement, do not reach above chance levels in detecting deception when using intuition alone. For example, Ekman & O'Sullivan (1991) showed in two studies of law enforcement officials that many fail to reach above chance levels. On the other hand, other studies show that some lie catchers, such as psychological experts or the secret service, can perform with above chance accuracy in detecting deception (Ekman, O'Sullivan & Frank, 1999). In light of the difficulty in accurately determining deception, psychological research has focused on examining which cues used to judge deception are most accurate and on the development of more objective psycho physiological measures of deception."

Tags:cqt, deception, interrogation, police

Abstract
This paper is a research project, which uses anomaly intrusion detection to determine if there are any abnormal patterns and, hence, intrusions in the provided log files. The author stresses that a statistics approach seems to be the easiest and most straightforward approach. The paper relates that a common practice in IDS software is to incorporate different techniques to detect intrusion so that other methods such as hierarchical clustering can still be included in the system to search for suspicious/ known data patterns such as viruses. The paper includes charts, graphs and a screen-shot.

From the Paper
"Since we are not building a new system, we will try to implement and base the report on existing work. Viewing sequence algorithms for intrusion detection helps to determine which patterns look like patterns of intrusion. The statistics technique is discussed but will not be programmed at this current time. We will also attempt to show manually how this algorithm will detect the patterns using previous research as it correlates to this specific data using logs provided and some data mining algorithm."

Tags:algorithms, tree-like, clustering, pattern, ids