Balancing Cooperation and Risk in Intrusion Detection

ACM Transactions on Information and System Security

Volumn 3, Issue 1, 2000, Pages 1-29

  Frincke, Deborah ^a  

^a UNIVERSITY OF IDAHO   (United States)

Author keywords

Access control models; authorization mechanisms; collaborative systems; Management; Security

Indexed keywords

EID: 0007724451     PISSN: 10949224     EISSN: 15577406     Source Type: Journal    
DOI: 10.1145/353323.353324     Document Type: Article

References (24)

1. Bell, D. and Lapadula, L. 1973. Secure computer systems: Mathematical foundations and model. Tech. Rep. M74-244. MITRE Corp., Bedford, MA
2. Biba, K. 1977. Integrity considerations for secure computer systems. Tech. Rep. ESD-TR-76-372. Electronic Systems Div., Air Force, Hanscom AFB, MA
3. Denning, D. E. 1982. Cryptography and Data Security. ACM Press/Addison-Wesley Publ. Co., New York, NY
4. Fellows, J. and Hemenway, J. 1987. The architecture of a distributed trusted computing base. In Proceedings of the 10th National Conference on Computer Security, 68-77
5. Freiss, M. 1997. Protecting Networks with SATAN. O'Reilly & Associates, Inc., Sebastopol, CA
6. Frincke, D., Evans, J., and Aucutt, D. 1996. Hierarchical management of misuse reports. Comput. Inf
7. Garfinkel, S. and Spafford, G. 1996. Practical Unix and Internet Security. 2nd ed. O'Reilly & Associates, Inc., Sebastopol, CA
8. Greenberg, I. and Lunt, T. 1993. Secure Alpha: Security policy and policy interpretation for a class B3 multilevel secure real-time distributed operating system. Tech. Rep. SRI Project 2385. Computer Science Laboratory, SRI International, Menlo Park, CA
9. Heberlein, L. T., Dias, G. V., Levitt, K. N., Mukherjee, B., Wood, J., and Wolber, D. 1990. A network security monitor. In Proceedings of the IEEE Symposium on Research in Security and Privacy (Oakland, CA), IEEE Computer Society Press, Los Alamitos, CA, 296-30304
10. Heberlein, L., Mukherjee, B., Levitt, K., Dias, G., and Mansur, D. 1991. Towards detecting intrusions in a networked environment. In Proceedings of the 14th NIST-NCSC National Conference on Computer Security (Washington, D. C., Oct.)
11. Ho, Y. 1997. Partial order state transition analysis for an intrusion detection system. Master's Thesis. University of Idaho, Moscow, ID
12. Ilgun, K., Kemmerer, R. A., and Porras, P. A. 1995. State transition analysis: a rule-based intrusion detection approach. IEEE Trans. Softw. Eng. 21, 3 (Mar. 1995), 181-199
13. Jones, Lipton, and Snyder. 1976. A linear time algorithm for deciding security. In Proceedings of the 17th Annual Symposium on Foundations of Computer Science
14. Neuman, C. 1994. Using Kerberos for authentication on computer networks. IEEE Commun. Mag. 32, 9
15. Neumann, P. and Porras, P. 1999. Experience with EMERALD to date. In Proceedings of the First USENIX Workshop on Intrusion Detection and Network Monitoring, USENIX Assoc., Berkeley, CA, 73-80
16. Polla, D., Mcconnell, J., Johnson, T., Marconi, J., Tobin, D., and Frincke, D. 1998. A frame work for cooperative intrusion detection. In Proceedings of the National Conference on Computer Security Systems, 361-373
17. Porras, P. and Neumann, P. 1997. EMERALD: Event monitoring enabling responses to anomalous live disturbances. In Proceedings of the National Conference on Computer Security Systems, 719-729
18. Sandhu, R. S. 1993. Lattice-based access control models. IEEE Computer 26, 11, 9-19
19. Simons, B. 2000. From the president: Building big brother. Commun. ACM, 31-32
20. Smith, G. 1992. Classifying and downgrading: Is a human needed in the loop? In Research Directions in Database Security, T. Lunt, Ed. Springer-Verlag, New York, NY, 13-30
21. Snapp, S. and Brentano, J. 1991. DIDS (Distributed Intrusion Detection System): Motivation, architecture and an early prototype. In Proceedings of the 14th NIST-NCSC National Conference on Computer Security (Washington, D. C., Oct.)
22. Staniford-Chen, S. and Cheung, S. 1996. GrIDS: A graph-based intrusion detection system for large networks. In Proceedings of the Conference on Computer Security (ESORICS 96, Rome, Italy), E. Bertino, H. Kurth, G. Martella, and E. Montolivo, Eds. Springer-Verlag, New York, NY
23. Staniford-Chen, S., Tung, B., and Schnackenberg, D. 1998. The common intrusion detection format (CIDF). In Proceedings of the Workshop on Information Survivability
24. Zamboni, D. and Spafford, E. 1999. New directions for the AAPHID architecture. In Recent Advances in Intrusion Detection, D. Zamboni and E. Spafford