Distributed audit trail analysis

Proceedings of the Symposium on Network and Distributed System Security, NDSS 1995

Volumn , Issue , 1995, Pages 102-112

  Mounji, Abdelaziz ^a   Le Charlier, Baudouin ^a   Zampunidris, Denis ^a   Habra, Naji ^a  

^a UNIVERSITY OF NAMUR   (Belgium)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER HARDWARE DESCRIPTION LANGUAGES; DATA MINING; INTRUSION DETECTION;

AUDIT TRAIL ANALYSIS; DISTRIBUTED ARCHITECTURE; DISTRIBUTED DATA STREAMS; ON-LINE ANALYSIS; PERFORMANCE MEASUREMENTS; RULE-BASED LANGUAGE; SECURITY MONITORING; UNSTRUCTURED DATA;

NETWORK SECURITY;

EID: 0002535673     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NDSS.1995.390641     Document Type: Conference Paper

References (18)

1. [l] A. Baur, W. Weiss, Audit Analysis Tool for Systems with High Demands Regarding Security and Access Control. Research Report, ZFE F2 SOF 42, Siemens Nixdorf Software, Munich, November 1988.
2. W.R. Cheswick, S.M. Bellovin, Firewalls and internet security: repelling the wily hacker. Addison-Wesley 1994, 306 pages. ISBN 0-201-63357-4.
3. D.E. Denning, An Intrusion-Detection Model. IEEE Transactions on Software Engineering, vo1.13 No.2, February 1987.
4. Th. D. Garvey, T.F. Lunt, Model-Based Intrusion Detection. Proceedings of the 14th National Security Conference, Washington DC., October 1991.
5. T. Lunt, J. van Horne, L. Halme, Automated Analysis of Computer System Audit Trails. Proceedings of the 9th DOE Computer Security Group Conference, May 1986.
6. T. F. Lunt, R. Jagannathan, A Prototype Real-time Intrusion Detection Ezpert System. Proceedings of the 1988 IEEE Symposium on Security and Privacy, April 1988.
7. T. F. Lunt, Automated Audit Trail Analysis and Intrusion Detection: A Survey. Proceedings of the 11th National Security Conference, Baltimore, MD, October 1988.
8. T. F. Lunt, Real Time Intrusion Detection. Proceedings of the COMPCON spring 89’, San Francisco, CA, February 1989.
9. T. F. Lunt et. al., A Real-Time Intrusion Detection Ezpert System. Interim Progress Report, Computer Science Laboratory, SRI International, Menlo Park, CA, May 1990.
10. N.Habra, B. Le Charlier, A. Mounji, Preliminary report on Advanced Security Audit Trail Analysis on Unix 15.12.91, 34 pages.
11. N.Habra, B. Le Charlier, A. Mounji, Advanced Security Audit Trail Analysis on Unix. Implementation design of the NADF Evaluator Mar 93, 62 pages.
12. N.Habra, B. Le Charlier, I. Mathieu, A. Mounji, ASAX: Software Architecture and Rule-based Language for Universal Audit Trail Analysis. Proceedings of the Second European Symposium on Research in Computer Security (ESORICS). Toulouse, France, November 1992.
13. A. Mounji, B. Le Charlier, D. Zampunidris, N.Habra, Preliminary report on Advanced Security Audit Trail Analysis on Unix 15.12.91, 34 pages.
14. Marshall T. Rose, The Open Book: a Practical Perspective on OSI. Prentice-Hall 1990, 651 pages. ISBN 0-13-643016-3.
15. A. Beguelin, J. Dongarra, A. Geist, R.Manchek, V. Sunderam, A User Guide to PVM (Parallel Virtual Machine). ORNL/TM-11826. July, 1991, 13 pages.
16. Sun Microsystems, Network Programming Guide, Part Number 800-3850-10 Revision A of 27 March, 1990.
17. Craig C. Douglas, Timothy G. Mattson, Martin H. Shults, Parallel Programming Systems For Workstation Clusters. Yale University Department of Computer Science Research Report YALEU/DCS/TR-975, August 1993, 36 pages.
18. [le] J.R. Winkler, A Unix Prototype for Intrusion and Anomaly Detection in Secure Networks. Planning Research Corporation, R&D, 1990.