A software fault tree approach to requirements analysis of an intrusion detection system

Requirements Engineering

Volumn 7, Issue 4, 2002, Pages 207-220

  Helmer, Guy ^a   Wong, Johnny ^a   Slagell, Mark ^a   Honavar, Vasant ^a   Miller, Les ^a   Lutz, Robyn ^a  

^a Iowa State University   (United States)

Author keywords

Coloured Petri nets; Intrusion detection system; Mobile agents; Requirements analysis; Software fault tree

Indexed keywords

EID: 15944398393     PISSN: 09473602     EISSN: 1432010X     Source Type: Journal    
DOI: 10.1007/s007660200016     Document Type: Article

References (29)

1. Amoroso E. Intrusion detection: intrusion. Net Books, Sparta, NJ, 1999
2. Helmer G, Wong JSK, Honavar V, Miller L. Intelligent agents for intrusion detection. In: Proceedings, IEEE information technology conference, Syracuse, NY, September 1998, pp 121-124
3. Bradshaw JM (ed). An introduction to software agents. MIT Press, Cambridge, MA, 1997
4. Leveson NG. Safeware: system safety and computers. Adion-Wesey, Reading, MA, 1995
5. De Lemos R, Saeed A, Anderson T. Analyzing safety requirements for process-control systems. IEEE Software 1995;12(3):42-53
6. Lutz R, Woodhouse RM. Requirements analysis using forward and backward search. Ann Software Eng 1997;3:459-475
7. Hansen KM, Ravn AP, Stavridou V. From safety analysis to software requirements. IEEE Trans Software Eng 1998;24(7):573-584
8. Amoroso E. Fundamentals of computer security technology. Prenice-Hall, Upper Saddle River, NJ, 1994
9. Leveson NG, Cha SS, Shimeall TJ. Safety verification of Ada programs using software fault trees. IEEE Software 1991;8(4):48-59
10. Lutz RR. Targeting safety-related errors during software requirements analysis. J Syst Software 1996;34:223-230
11. Idaho National Engineering and Environmental Laboratory. SAPHIRE - systems analysis programs for hands-on integrated reliability evaluations. Online at http://saphire.inel.gov/ [2000]
12. Raheja DG. Assurance technologies: principles and practices. McGraw-Hill Engineering and Technology Management Series. McGraw-Hill, New York, 1991
13. Manian R, Dugan JB, Coppit D, Sullivan KJ. Combining various solution techniques for dynamic fault tree analysis of computer systems. In: Third IEEE international high-assurance systems engineering symposium, IEEE Computer Society, 1998, pp 21-28
14. Staniford-Chen S, Cheung S, Crawford R et al. GrIDS: a graph based intrusion detection system for large networks. In: 19th national information systems security conference proceedings, October 1996, pp 361-370
15. Lin J-L, Wang XS, Jajodia S. Abstraction-based misuse detection: high-level specifications and adaptable strategies. In: Proceedings, IEEE computer security foundations workshop, Rockport, MA, June 1998, pp 190-201
16. Kumar S, Spafford EH. A pattern matching model for misuse intrusion detection. In: Proceedings of the 17th national computer security conference, Baltimore, MD, October 1994, pp 11-21
17. Kumar S. Classification and detection of computer intrusions. PhD thesis, Purdue University, West Lafayette, IN, August 1995
18. Ruiu D. Cautionary tales: stealth coordinated attack howto. Online at http://www.nswc.navy.mil/ISSEC/CID/Stealth_Coordinated_Attack.html [July 1999]
19. Dittrich D, Weaver G, Dietrich S, Long N. The 'mstream' distributed denial of service attack tool. Online at http:// staff.washington.edu/dittrich/ misc/mstream.analysis.txt [May 2000]
20. Dittrich D. The ' stacheldraht' distributed denial of service attack tool. Online at http://staff.washington.edu/dittrich/misc/stacheldraht.analysis. txt [December 1999]
21. Dittrich D. The 'tribe flood network' distributed denial of service attack tool. Online at http://staff.washington.edu/dittrich/misc/ tfn.analysis.txt [October 1999]
22. Dittrich D. The DoS Project's 'trinoo' distributed denial of service attack tool. Online at http://staff.washington.edu/dittrich/ misc/trinoo.analysis.txt [October 1999]
23. CERT Coordination Center. Two input validation problems in FTPD. Online at http://www.cert.org/advisories/CA-2000-13.html [July 2000]
24. CERT Coordination Center. FTP bounce. Online at http:// www.cert.org/advisories/CA-97.27.FTP_bounce.html [December 1997]
25. Del Gobbo D, Cukic B, Napolitano MR, Easterbrook S. Fault detectability analysis for requirements validation of fault tolerant systems. In: Fourth IEEE international high-assurance systems engineering symposium, IEEE Computer Society, 1999, pp 231-238
26. Puketza NJ, Zhang K, Chung M, Mukherjee B, Olsson RA. A methodology for testing intrusion detection systems. IEEE Trans Software Eng 1996;22(10):719-729
27. Helmer G. Intelligent multi-agent system for intrusion detection and countermeasures. PhD thesis, Iowa State University, Ames, IA, December 2000
28. Slagell M. The design and implementation of MAIDS (mobile agent intrusion detection system). Technial report TR01-07, Iowa State University Department of Computer Science, Ames, IA, 2001
29. Helmer G, Wong J, Honavar V, Miller L. Lightweight agents for intrusion detection. J Syst Software 2003 (to appear)