My dissertation work targeted one of the hardest problems of intrusion detection that is the inability of IDSs to detect new attacks and their heavy dependence on training data to gain knowledge of attacks. So how to make IDSs to perform intrusion detection without training data becomes pressing. I am interested in investigating Bayesian networks as well as some statistical techniques to progressively tune an IDS in order to achieve good performance. Computer networks are evolving rapidly, giving rise to new challenges and opening up exciting areas of research such as distributed intrusion detection, coordinated intrusion detection, deploying audit trail data collecting units and detection units based on network topology and underlying networking techniques. For instance, as ATM switches are becoming popular, traditional network traffic monitoring will not be suitable any more.
New research has to be done to adapt to the fast development of networks.
In a long term, I am interested in expanding my research to the emerging areas related to intrusion detection and network security.