Signature-based NIDS

• Some systems consider multiple packets

  • Rate, multi-packet pattern-match, ...

• Nemean: A System for Generating Semantic-Aware Signatures

  • Yegneswaran, Giffen, Barford and Jha, UW CS