Intrusion Detection
The area of Intrusion Detection includes research and development of technologies to identify possible attacks on computers. Intrusion detection techniques include signature detection (identifying known malware) and anomaly detection (identifying unusual behavior that may indicate malware). Intrusion detection may focus on communications (as malware spreads) or on its effect on individual hosts. At ATC-NY, research has focused on anomaly detection on individual hosts.