David J. Marchette Knihy

Focusing on the intersection of mathematics and computer security, this book originated from a course on computer intrusion detection at Johns Hopkins University. It addresses the fundamental challenges in computer security while emphasizing modeling and detection methods, appealing to mathematicians rather than just security analysts. The author, with experience in the SHADOW program, aimed to fill the gap in existing literature, which often neglected the mathematical aspects crucial for understanding intrusion detection.

This book covers the basic statistical and analytical techniques of computer intrusion detection. It is the first to present a data-centered approach to these problems. It begins with a description of the basics of TCP/IP, followed by chapters dealing with network traffic analysis, network monitoring for intrusion detection, host based intrusion detection, and computer viruses and other malicious code.