Reliable Software Laboratory of UCSB  
   The Reliable Software Group (RSG) works on languages and tools for designing, building, and validating software systems. Specific areas that the group has targeted include concurrent and real-time systems. We are also investigating techniques for increasi
   http://www.cs.ucsb.edu/~rsg/STAT/

Intrusion detection at the MIT Lincoln Lab, Information Systems Technology Group  
   Information Assurance focusing on techniques for detecting and reacting to intrusions into networked information systems. We have coordinated several evaluations of computer network intrusion detection systems.
   http://www.ll.mit.edu/IST/

Intrusion Detection in Columbia University  
   This project is a data-mining based approach to detecting intruders in computer systems. The project approaches the intrusion detection problem from a data-mining perspective. Large quantities of data are collected from the system and analyzed to build
   http://www.cs.columbia.edu/ids/

CIDER Project  
   The Cooperative Intrusion Detection Evaluation and Response project is an effort of NSWC Dahlgren, NFR, NSA, the SANS community and other interested parties to locate, document, and improve security software.
   http://www.nswc.navy.mil/ISSEC/CID/

Intrusion Detection Exchange Format (idwg)  
   The purpose of the Intrusion Detection Working Group is to define data formats and exchange procedures for sharing information of interest to intrusion detection and response systems, and to management systems which may need to interact with them. The In
   http://www.ietf.org/html.charters/idwg-charter.html

Computer immune systems (University of New Mexico)  
   Four examples of how we are applying ideas from immunology to today's computer security problems are a host based intrusion-detection method, a network based intrusion-detection system, a distributable change-detection algorithm, and a method for intentio
   http://www.cs.unm.edu/~immsec/

The Center for Secure and Dependable Software(University of Idaho)  
   Hummer is a distributed component for any Intrusion Detection System ; Magpie is a hierarchical network of lightweight, mobile, and adaptive tools designed to both investigate and guard against intrusions.
   http://www.csds.uidaho.edu/

Cost-sensitive intrusion detection(Georgia Institute of Technology)  
   A Data Mining Approach for Building Cost-sensitive and Light Intrusion Detection Models
   http://www.cc.gatech.edu/~wenke/project/id.html

Intrusion detection projects at UC Davis  
   Anomaly Detection in Database Systems, Common Intrusion Detection Framework, Intrusion Detection and Isolation Protocol / IDIP, Intrusion Detection for Large Networks, Misuse Detection and Workshop for Intrusion Detection and Response Data Sharing.
   http://seclab.cs.ucdavis.edu/

Common Intrusion Detection Framework (CIDF)  
   Aims to develop protocols and application programming interfaces so that intrusion detection research projects can share information and resources and so that intrusion detection components can be reused in other systems.
   http://www.isi.edu/gost/cidf/

Observing the Observers - Evaluation of NIDSs at the Polytechnical University of Salzburg  
   This homepage provides general information about IDSs as well as specific information about the project 'OtO'.
   http://www.students.fh-sbg.ac.at/~messl/

Intrusion Detection Research Group(NCSU)  
   The Intrusion Detection (ID) Research Group at NC State University was formed by Dr. Peng Ning in August 2002.
   http://discovery.csc.ncsu.edu/index.html

MInnesota Intrusion Detection System (MINDS)  
   Research project focused on the development of high performance data mining algorithms and tools that will provide support required to analyze the massive data sets generated by various processes that monitor computing and information systems.
   http://www.cs.umn.edu/research/minds/

M-Correlator  
   A mission-impact-based approach to INFOSEC alarm correlation.
   http://www.sdl.sri.com/papers/mcorrelator/

System Design Laboratory Intrusion Detection  
   Research institute actively involved in intrusion-detection research since 1983. Research focuses on EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances, a system designed to detect and respond to network attacks.
   http://www.sdl.sri.com/programs/intrusion/

Intrusion Detection User Group  
   A group mailing focusing on security information management, intrusion response, intrusion detection, intrusion prevention, intrusion management and honeynets/honeypots.
   http://idug.cryptojail.net

Survivability Research and Analysis (CERT)  
   Research focuses on methods of improving the technical approach of identifying and preventing security flaws, limiting the damage from attacks, and ensuring that systems continue to provide essential services despite of compromises or failures.
   http://www.cert.org/nav/index_purple.html

ResearchIndex, IDS section  
   ResearchIndex is a scientific literature digital library that aims to improve the dissemination and feedback of scientific literature, and to provide improvements in functionality, usability, availability, cost, comprehensiveness, efficiency, and timeline
   http://citeseer.ist.psu.edu/Security/IntrusionDetection/

EMERALD (Event Monitoring Enabling Responses to Anomalous Live Disturbances)  
   Emeral represents state-of-the art in research and development of systems and components for anomaly and misuse detection in computer systems and networks.
   http://www.sdl.sri.com/projects/emerald/index.html

COAST Intrusion Detection Pages  
   Perdue University's clearinghouse for intrusion detection information. Includes overviews, policy, detection methods, and tools.
   http://www.cerias.purdue.edu/about/history/coast_resources/intrusion_detection/

Intrusion detection articles  
   Selected articles and papers related to intrusion detection research.
   http://ids.homeunix.org/article.php

INBOUNDS - Integrated Network Based Ohio University Network Detective Service  
   INBOUNDS is a network-based, real-time, hierarchical intrusion detection system being developed at Ohio University. INBOUNDS detects suspicious behavior by scrutinizing network information generated by Tcprace, and host data gathered by the monitors of De
   http://zen.ece.ohiou.edu/~inbounds/index.shtml

Thor  
   Research project that utilizes network attack variations to make more precise statements about the detection capabilities of an IDS.
   http://thor.cryptojail.net

Recent Advances in Intrusion Detection Symposium 2004  
   International Symposium on Recent Advances in Intrusion Detection. Held in conjunction with ESORICS 2004, September 15-17, 2004. The RAID International Symposium series is intended to advance the field of intrusion detection by promoting the exchange of
   http://raid04.eurecom.fr