Repeating the past experimental and empirical methods in system and software security [Elektronische Ressource] / Stephan Neuhaus

Repeating the PastExperimental and Empirical Methodsin System and Software SecurityStephan NeuhausDissertation zur Erlangung des Grades desDoktors der Ingenieurswissenschaftender Naturwissenschaftlich-Technischen Fakultäten der Universität des SaarlandesSaarbrücken, 2007© 2007, 2008 by Stephan NeuhausAll rights reserved. Published 2008Printed January 24, 2008 from SVN revision 143Day of Defense February 6, 2008Dean Prof. Dr. Thorsten HerfetHead of the Examination Board Prof. Dr. Reinhard WilhelmMembers of the Ex Board Prof. Dr. Andreas Zeller,Prof. Dr. Michael Backes, Philipp LucasMain Typeface URW Garamond No. 8 10/12Additional Typefaces Adobe Times, Adobe Courier,Computer Modern Math SymbolsATypesetting System PDF-LT XEPrinted in Germany4 3 2 2 3 4 5To Stefanie, with love.It’s like déjà vu all over again.— Yogi BerraContentsAbstract xiPreface xv1 Introduction 12 Causes And Effects 32.1 Analysis of Break-Ins . . . . . . . . . . . . . . . . . . . . . . . . . . 32.1.1 Forensic Analysis of Break-ins . . . . . . . . . . . . . . . . . 32.1.2 Cause-Finding as Minimization . . . . . . . . . . . . . . . . 52.1.3 Philosophical Justification . . . . . . . . . . . . . . . . . . . 62.2 Related Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92.2.1 Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92.2.2 Research in Intrusion Analysis . . . . . . . . . . . . . . . . . 112.2.3 Research in Intrusion Prevention . . . . .