Network Security

The IAIK network security group investigates secure telecommunication infrastructures. In that context, the main focus is on detecting unwanted remote manipulation to systems. Intrusion detection and intrusion prevention are common terms. The underlying mechanisms are mostly based on probabilistic techniques to be able to detect unknown and new attacks. Therefore, data mining approaches are investigated as well as machine learning- and classification techniques. Of special interest is the detection of polymorphic- and metamorphic code , the modeling of “normal” system behavior, as well as the detection of network policy violation based network traffic classification.