A neural network component for an intrusion detection system. - Hervé Debar; Monique Becker; Didier Siboni (S&P, 1992)

Building an Intrusion-Detection System to Detect Suspicious Process Behavior. - Andreas Wespi; Hervé Debar (Recent Advances in Intrusion Detection, 1999)

Authenticating public terminals. - N. Asokan; Hervé Debar; Michael Steiner 001; Michael Waidner (Comput. Networks, 1999)

Towards a taxonomy of intrusion-detection systems. - Hervé Debar; Marc Dacier; Andreas Wespi (Comput. Networks, 1999)

A Lightweight Tool for Detecting Web Server Attacks. - Magnus Almgren; Hervé Debar; Marc Dacier (NDSS, 2000)

Intrusion Detection Using Variable-Length Audit Trail Patterns. - Andreas Wespi; Marc Dacier; Hervé Debar (Recent Advances in Intrusion Detection, 2000)

A revised taxonomy for intrusion-detection systems. - Hervé Debar; Marc Dacier; Andreas Wespi (Ann. des Télécommunications, 2000)

Fixed- vs. Variable-Length Patterns for Detecting Suspicious Process Behavior. - Andreas Wespi; Hervé Debar; Marc Dacier; Mehdi Nassehi (J. Comput. Secur., 2000)

Aggregation and Correlation of Intrusion-Detection Alerts. - Hervé Debar; Andreas Wespi (Recent Advances in Intrusion Detection, 2001)

Evaluation of the Diagnostic Capabilities of Commercial Intrusion Detection Systems. - Hervé Debar; Benjamin Morin (RAID, 2002)

M2D2: A Formal Data Model for IDS Alert Correlation. - Benjamin Morin; Ludovic Mé; Hervé Debar; Mireille Ducassé (RAID, 2002)

Correlation of Intrusion Symptoms: An Application of Chronicles. - Benjamin Morin; Hervé Debar (RAID, 2003)

A Serial Combination of Anomaly and Misuse IDSes Applied to HTTP Traffic. - Elvis Tombini; Hervé Debar; Ludovic Mé; Mireille Ducassé (ACSAC, 2004)

Honeypots: Practical Means to Validate Malicious Fault Assumptions. - Marc Dacier; Fabien Pouget; Hervé Debar (PRDC, 2004)

Monitoring IDS Background Noise Using EWMA Control Charts and Alert Information. - Jouni Viinikka; Hervé Debar (RAID, 2004)

Détection d'intrusions : corrélation d'alertes. - Hervé Debar; Benjamin Morin; Frédéric Cuppens; Fabien Autrel; Ludovic Mé; Bernard Vivinis; Salem Benferhat; Mireille Ducassé; Rodolphe Ortalo (Tech. Sci. Informatiques, 2004)

Intrusion Detection: Introduction to Intrusion Detection and Security Information Management. - Hervé Debar; Jouni Viinikka (FOSAD, 2005)

Conceptual Analysis of Intrusion Alarms. - Benjamin Morin; Hervé Debar (ICIAP, 2005)

Improving Security Management through Passive Network Observation. - Yohann Thomas; Hervé Debar; Benjamin Morin (ARES, 2006)

Time series modeling for IDS alert management. - Jouni Viinikka; Hervé Debar; Ludovic Mé; Renaud Séguier (AsiaCCS, 2006)

Using Contextual Security Policies for Threat Response. - Hervé Debar; Yohann Thomas; Nora Boulahia-Cuppens; Frédéric Cuppens (DIMVA, 2006)

An extended RBAC profile of XACML. - Diala Abi Haidar; Nora Cuppens-Boulahia; Frédéric Cuppens; Hervé Debar (SWS, 2006)

Foreword. - Frédéric Cuppens; Hervé Debar; Elisa Bertino (Ann. des Télécommunications, 2006)

WebAnalyzer: accurate detection of HTTP attack traces in web server logs. - Hervé Debar; Elvis Tombini (Ann. des Télécommunications, 2006)

Security information management as an outsourced service. - Hervé Debar; Jouni Viinikka (Inf. Manag. Comput. Secur., 2006)

Resource Classification Based Negotiation in Web Services. - Diala Abi Haidar; Nora Cuppens-Boulahia; Frédéric Cuppens; Hervé Debar (IAS, 2007)

Introduction Selection of articles from the SAR-SSI 2006. - Frédéric Cuppens; Hervé Debar; Danielle Boulanger; Alban Gabillon (Ann. des Télécommunications, 2007)

Enabling automated threat response through the use of a dynamic security policy. - Hervé Debar; Yohann Thomas; Frédéric Cuppens; Nora Cuppens-Boulahia (J. Comput. Virol., 2007)

The Intrusion Detection Message Exchange Format (IDMEF). - Hervé Debar; David A. Curry; Benjamin S. Feinstein (RFC, 2007)

An ontology-based approach to react to network attacks. - Nora Cuppens-Boulahia; Frédéric Cuppens; Jorge E. López de Vergara; Enrique Vázquez; Javier Guerra; Hervé Debar (CRiSIS, 2008)

8102 Working Group – Attack Taxonomy. - Marc Dacier; Hervé Debar; Thorsten Holz; Engin Kirda; Jan Kohlrausch; Christopher Kruegel; Konrad Rieck; James P. G. Sterbenz (Network Attack Detection and Defense, 2008)

08102 Outcome Working Group – Situational Awareness. - Richard A. Kemmerer; Roland Büschkes; Ali Fessi; Hartmut König; Peter Herrmann; Stephen D. Wolthusen; Marko Jahnke; Hervé Debar; Ralph Holz; Tanja Zseby; Dirk Haage (Network Attack Detection and Defense, 2008)

Negotiation of Prohibition: An Approach Based on Policy Rewriting. - Nora Cuppens-Boulahia; Frédéric Cuppens; Diala Abi Haidar; Hervé Debar (SEC, 2008)

Analysis of Computer Infection Risk Factors Based on Customer Network Usage. - Yannick Carlinet; Ludovic Mé; Hervé Debar; Yvon Gourhant (SECURWARE, 2008)

Behavioral detection of malware: from a survey towards an established taxonomy. - Grégoire Jacob; Hervé Debar; Eric Filiol (J. Comput. Virol., 2008)

Malware as interaction machines: a new framework for behavior modelling. - Grégoire Jacob; Eric Filiol; Hervé Debar (J. Comput. Virol., 2008)

A Service Dependency Modeling Framework for Policy-Based Response Enforcement. - Nizar Kheir; Hervé Debar; Frédéric Cuppens; Nora Cuppens-Boulahia; Jouni Viinikka (DIMVA, 2009)

Malware Behavioral Detection by Attribute-Automata Using Abstraction from Platform and Language. - Grégoire Jacob; Hervé Debar; Eric Filiol (RAID, 2009)

XeNA: an access negotiation framework using XACML. - Diala Abi Haidar; Nora Cuppens-Boulahia; Frédéric Cuppens; Hervé Debar (Ann. des Télécommunications, 2009)

Malware Detection using Attribute-Automata to parse Abstract Behavioral Descriptions - Grégoire Jacob; Hervé Debar; Eric Filiol (CoRR, 2009)

Formalization of malware through process calculi - Grégoire Jacob; Eric Filiol; Hervé Debar (CoRR, 2009)

An ontology-based approach to react to network attacks. - Nora Cuppens-Boulahia; Frédéric Cuppens; Fabien Autrel; Hervé Debar (Int. J. Inf. Comput. Secur., 2009)

A logic-based model to support alert correlation in intrusion detection. - Benjamin Morin; Ludovic Mé; Hervé Debar; Mireille Ducassé (Inf. Fusion, 2009)

Processing intrusion detection alert aggregates with time series modeling. - Jouni Viinikka; Hervé Debar; Ludovic Mé; Anssi Lehikoinen; Mika P. Tarvainen (Inf. Fusion, 2009)

Functional polymorphic engines: formalisation, implementation and use cases. - Grégoire Jacob; Eric Filiol; Hervé Debar (J. Comput. Virol., 2009)

Formalization of Viruses and Malware Through Process Algebras. - Grégoire Jacob; Eric Filiol; Hervé Debar (ARES, 2010)

A Service Dependency Model for Cost-Sensitive Intrusion Response. - Nizar Kheir; Nora Cuppens-Boulahia; Frédéric Cuppens; Hervé Debar (ESORICS, 2010)

Service Dependencies in Information Systems Security. - Hervé Debar; Nizar Kheir; Nora Cuppens-Boulahia; Frédéric Cuppens (MMM-ACNS, 2010)

Challenges for Cloud Networking Security. - Peter Schoo; Volker Fusenig; Victor Souza; Márcio Melo; Paul Murray; Hervé Debar; Houssem Medhioub; Djamal Zeghlache (MONAMI, 2010)

Ex-SDF: An Extended Service Dependency Framework for Intrusion Impact Assessment. - Nizar Kheir; Nora Cuppens-Boulahia; Frédéric Cuppens; Hervé Debar (SEC, 2010)

An Ontology-Based Model for SIEM Environments. - Gustavo Gonzalez Granadillo; Yosra Ben Mustapha; Nabil Hachem; Hervé Debar (ICGS3/e-Democracy, 2011)

One year of SSL internet measurement. - Olivier Levillain; Arnaud Ébalard; Benjamin Morin; Hervé Debar (ACSAC, 2012)

Cross-domain vulnerabilities over social networks. - Catherine Bernard; Hervé Debar; Salim Benayoune (CASoN, 2012)

VESPA: multi-layered self-protection for cloud resources. - Aurélien Wailly; Marc Lacoste; Hervé Debar (ICAC, 2012)

HADEGA: A novel MPLS-based mitigation solution to handle network attacks. - Nabil Hachem; Hervé Debar; Joaquín García-Alfaro (IPCCC, 2012)

Individual Countermeasure Selection Based on the Return On Response Investment Index. - Gustavo Gonzalez Granadillo; Hervé Debar; Grégoire Jacob; Chrystel Gaber; Mohammed Achemlal (MMM-ACNS, 2012)

Limitation of Honeypot/Honeynet Databases to Enhance Alert Correlation. - Yosra Ben Mustapha; Hervé Debar; Grégoire Jacob (MMM-ACNS, 2012)

Challenges for Advanced Security Monitoring - The MASSIF Project. - Roland Rieke; Elsa Prieto; Rodrigo Diaz; Hervé Debar; Andrew Hutchison (TrustBus, 2012)

Network Attack Detection and Defense Early Warning Systems - Challenges and Perspectives (Dagstuhl Seminar 12061). - Georg Carle; Hervé Debar; Falko Dressler; Hartmut König (Dagstuhl Reports, 2012)

An ontology-driven approach to model SIEM information and operations using the SWRL formalism. - Gustavo Gonzalez Granadillo; Yosra Ben Mustapha; Nabil Hachem; Hervé Debar (Int. J. Electron. Secur. Digit. Forensics, 2012)

Parsifal: Writing efficient and robust binary parsers, quickly. - Olivier Levillain; Hervé Debar; Benjamin Morin (CRiSIS, 2013)

A TCP delay-based mechanism for detecting congestion in the Internet. - Khaled Dassouki; Hervé Debar; Haïdar Safa; Abbas Hijazi (ICCIT, 2013)

An Adaptive Mitigation Framework for Handling Suspicious Network Flows via MPLS Policies. - Nabil Hachem; Joaquín García-Alfaro; Hervé Debar (NordSec, 2013)

Service Dependencies-Aware Policy Enforcement Framework Based on Hierarchical Colored Petri Net. - Yosra Ben Mustapha; Hervé Debar (SSCC, 2013)

Attribute-Based Mining Process for the Organization-Based Access Control Model. - Ahmad Samer Wazan; Gregory Blanc; Hervé Debar; Joaquín García-Alfaro (TrustCom/ISPA/IUCC, 2013)

Classification of SSL Servers based on their SSL Handshake for Automated Security Assessment. - Sirikarn Pukkawanna; Gregory Blanc; Joaquín García-Alfaro; Youki Kadobayashi; Hervé Debar (BADGERS@ESORICS, 2014)

Policy Enforcement Point Model. - Yosra Ben Mustapha; Hervé Debar; Gregory Blanc (SecureComm (1), 2014)

Combining Technical and Financial Impacts for Countermeasure Selection. - Gustavo Gonzalez Granadillo; Christophe Ponchel; Gregory Blanc; Hervé Debar (AIDP, 2014)

RORI-based countermeasure selection using the OrBAC formalism. - Gustavo Gonzalez Granadillo; Malek Belhaouane; Hervé Debar; Grégoire Jacob (Int. J. Inf. Sec., 2014)

On the Isofunctionality of Network Access Control Lists. - Malek Belhaouane; Joaquín García-Alfaro; Hervé Debar (ARES, 2015)

TLS Record Protocol: Security Analysis and Defense-in-depth Countermeasures for HTTPS. - Olivier Levillain; Baptiste Gourdin; Hervé Debar (AsiaCCS, 2015)

Attack Volume Model: Geometrical Approach and Application. - Gustavo Gonzalez Granadillo; Grégoire Jacob; Hervé Debar (CRiSIS, 2015)

Considering technical and financial impact in the selection of security countermeasures against Advanced Persistent Threats (APTs). - Gustavo Gonzalez Granadillo; Joaquín García-Alfaro; Hervé Debar; Christophe Ponchel; Laura Rodriguez Martin (NTMS, 2015)

Automated Classification of C&C Connections Through Malware URL Clustering. - Nizar Kheir; Gregory Blanc; Hervé Debar; Joaquín García-Alfaro; Dingqi Yang (SEC, 2015)

Evaluating the Comprehensive Complexity of Authorization-based Access Control Policies using Quantitative Metrics. - Malek Belhaouane; Joaquín García-Alfaro; Hervé Debar (SECRYPT, 2015)

Using a 3D Geometrical Model to Improve Accuracy in the Evaluation and Selection of Countermeasures Against Complex Cyber Attacks. - Gustavo Gonzalez Granadillo; Joaquín García-Alfaro; Hervé Debar (SecureComm, 2015)

Selecting optimal countermeasures for attacks against critical systems using the attack volume model and the RORI index. - Gustavo Gonzalez Granadillo; Joaquín García-Alfaro; Ender Alvarez; Mohammed El-Barbori; Hervé Debar (Comput. Electr. Eng., 2015)

Selection of Mitigation Actions Based on Financial and Operational Impact Assessments. - Gustavo Gonzalez Granadillo; Alexander Motzek; Joaquín García-Alfaro; Hervé Debar (ARES, 2016)

StemJail: Dynamic Role Compartmentalization. - Mickaël Salaün; Marion Daubignard; Hervé Debar (AsiaCCS, 2016)

An n-Sided Polygonal Model to Calculate the Impact of Cyber Security Events. - Gustavo Gonzalez Granadillo; Joaquín García-Alfaro; Hervé Debar (CRiSIS, 2016)

Security Issues and Mitigation in Ethernet POWERLINK. - Jonathan Yung; Hervé Debar; Louis Granboulan (CyberICPS@ESORICS, 2016)

Hybrid Risk Assessment Model Based on Bayesian Networks. - François-Xavier Aguessy; Olivier Bettan; Gregory Blanc; Vania Conan; Hervé Debar (IWSEC, 2016)

ML: DDoS Damage Control with MPLS. - Pierre-Edouard Fabre; Hervé Debar; Jouni Viinikka; Grégory Blanc (NordSec, 2016)

Towards an Automated and Dynamic Risk Management Response System. - Gustavo Gonzalez Granadillo; Ender Alvarez; Alexander Motzek; Matteo Merialdo; Joaquín García-Alfaro; Hervé Debar (NordSec, 2016)

New Types of Alert Correlation for Security Information and Event Management Systems. - Gustavo Gonzalez Granadillo; Mohammed El-Barbori; Hervé Debar (NTMS, 2016)

Considering Internal Vulnerabilities and the Attacker's Knowledge to Model the Impact of Cyber Events as Geometrical Prisms. - Gustavo Gonzalez Granadillo; Jose Rubio-Hernan; Joaquín García-Alfaro; Hervé Debar (Trustcom/BigDataSE/ISPA, 2016)

Bayesian Attack Model for Dynamic Risk Assessment. - François-Xavier Aguessy; Olivier Bettan; Grégory Blanc; Vania Conan; Hervé Debar (CoRR, 2016)

Adaptive Policy-driven Attack Mitigation in SDN. - Rishikesh Sahay; Gregory Blanc; Zonghua Zhang; Khalifa Toumi; Hervé Debar (XDOMO@EuroSys, 2017)

Choosing Models for Security Metrics Visualization. - Maxim Kolomeec; Gustavo Gonzalez Granadillo; Elena Doynikova; Andrey Chechulin; Igor V. Kotenko; Hervé Debar (MMM-ACNS, 2017)

ArOMA: An SDN based autonomic DDoS mitigation framework. - Rishikesh Sahay; Gregory Blanc; Zonghua Zhang; Hervé Debar (Comput. Secur., 2017)

Selection of Pareto-efficient response plans based on financial and operational assessments. - Alexander Motzek; Gustavo Gonzalez Granadillo; Hervé Debar; Joaquín García 001; Ralf Möller 001 (EURASIP J. Inf. Secur., 2017)

A polytope-based approach to measure the impact of events against critical infrastructures. - Gustavo Gonzalez Granadillo; Joaquín García 001; Hervé Debar (J. Comput. Syst. Sci., 2017)

IoT Devices Recognition Through Network Traffic Analysis. - Mustafizur R. Shahid; Gregory Blanc; Zonghua Zhang; Hervé Debar (IEEE BigData, 2018)

Multi-Provider Secure Virtual Network Embedding. - François Boutigny; Stéphane Betgé-Brezetz; Hervé Debar; Grégory Blanc; Antoine Lavignotte; Ion Popescu (NTMS, 2018)

Dynamic risk management response system to handle cyber threats. - Gustavo Gonzalez Granadillo; Samuel Dubus; Alexander Motzek; Joaquín García 001; Ender Alvarez; Matteo Merialdo; Serge Papillon; Hervé Debar (Future Gener. Comput. Syst., 2018)

Methodology of a Network Simulation in the Context of an Evaluation: Application to an IDS. - Pierre-Marie Bajan; Christophe Kiennert; Hervé Debar (ICISSP, 2019)

Anomalous Communications Detection in IoT Networks Using Sparse Autoencoders. - Mustafizur R. Shahid; Gregory Blanc; Zonghua Zhang; Hervé Debar (NCA, 2019)

A Survey on Game-Theoretic Approaches for Intrusion Detection and Response Optimization. - Christophe Kiennert; Ziad Ismail; Hervé Debar; Jean Leneutre (ACM Comput. Surv., 2019)

A Quantitative Study of Vulnerabilities in the Internet of Medical Things. - Hervé Debar; Razvan Beuran; Yasuo Tan (ICISSP, 2020)

Automated Saturation Mitigation Controlled by Deep Reinforcement Learning. - Elkin Aguas; Anthony Lambert; Grégory Blanc; Hervé Debar (ICNP, 2020)

Generative Deep Learning for Internet of Things Network Traffic Generation. - Mustafizur R. Shahid; Gregory Blanc; Houda Jmila; Zonghua Zhang; Hervé Debar (PRDC, 2020)

Solving security constraints for 5G slice embedding: A proof-of-concept. - François Boutigny; Stéphane Betgé-Brezetz; Gregory Blanc; Antoine Lavignotte; Hervé Debar; Houda Jmila (Comput. Secur., 2020)

CVSS-BERT: Explainable Natural Language Processing to Determine the Severity of a Computer Security Vulnerability from its Description. - Mustafizur R. Shahid; Hervé Debar (ICMLA, 2021)

Towards a Systematic and Automatic Use of State Machine Inference to Uncover Security Flaws and Fingerprint TLS Stacks. - Aina Toky Rasoamanana; Olivier Levillain; Hervé Debar (ESORICS (3), 2022)

An Improved Honeypot Model for Attack Detection and Analysis. - Marwan Abbas-Escribano; Hervé Debar (ARES, 2023)

White paper on cybersecurity in the healthcare sector. The HEIR solution. - Konstantinos Lampropoulos 001; Apostolis Zarras; Eftychia Lakka; Polyanthi Barmpaki; Kostas Drakonakis; Manos Athanatos; Hervé Debar; Andreas Alexopoulos; Aristeidis Sotiropoulos; George Tsakirakis; Nikos Dimakopoulos; Dimitris Tsolovos; et al. (CoRR, 2023)

Mealy Verifier: An Automated, Exhaustive, and Explainable Methodology for Analyzing State Machines in Protocol Implementations. - Arthur Tran Van; Olivier Levillain; Hervé Debar (ARES, 2024)

Emerging Security Challenges of Large Language Models. - Hervé Debar; Sven Dietrich; Pavel Laskov; Emil C. Lupu; Eirini Ntoutsi (CoRR, 2024)

RAMA: a risk assessment solution for healthcare organizations. - Michail Smyrlis; Evangelos Floros; Ioannis Basdekis; Dumitru-Bogdan Prelipcean; Aristeidis Sotiropoulos; Hervé Debar; Apostolis Zarras; George Spanoudakis (Int. J. Inf. Sec., 2024)

Detecting Scrapers on E-commerce Websites Using a Reduced Feature Set. - Umberto Fontana; Elisa Chiapponi; Claudio Costanza; Vincent Rigal; Olivier Thonnard; Martynas Buozis; Hervé Debar (DSN-S, 2025)