Mario Golling

Biography

Mario Golling is research assistant at the continuative study program (studium plus) and at the „Chair for Communication Systems and Internet Services“, both at the Universität der Bundeswehr München (University of the Federal Armed Forces Germany). His key aspects of research activity are network security, cyber defence, intrusion detection and next generation internet. During 2007 till 2010, he was responsible for practical trainings as well as conceptual work regarding network administration, distributed simulation, operations research and IT security at the IT-branch of the “Signals and Intelligence School of the Federal Armed Forces Germany” (Führungsunterstützungsschule der Bundeswehr). From 2003 until 2007, he studied business informatics at the Universität der Bundeswehr München.

Presentation: Start Catching Up: Towards Next-Generation Intrusion Detection

Today, Intrusion Detection Systems (IDS) are integral components of larger networks. Even so, security incidents are on a day-to-day basis: Numerous data leakage scandals arouse public interest in the recent past and also other attacks like Stuxnet are discussed in the general public. On the one side, the commercial success of the Internet and the possibilities to carry out attacks from a relatively safe distance attracts criminals and made e-Crime to a multi-billion dollar market over the past years. On the other side, more and more services and systems migrate to the Internet, for example Voice over IP or Video on Demand. This enables new and potential attack vectors.

With the steadily increasing use of encryption technology, State-of-the-Art Intrusion- as well as Extrusion-Detection technologies can hardly safeguard current networks to the full extend. Furthermore, they are not able to cope with the arising challenges of the fast growing network environments.

The presentation shows the shortcomings of current IDSs when dealing with todays and upcoming threats and challenges. The causes for the fail of the security systems are explained and the requirements for Next-Generation IDSs are derived. Therefore, current research as well as open issues are presented.