Extracting and querying network attack scenarios knowledge in IDS using PCTCG and alert semantic networks

IEEE International Conference on Communications

Volumn 3, Issue , 2005, Pages 1512-1517

  Yan, Wei ^a   Hou, Edwin ^a   Ansari, Nirwan ^a  

^a NEW JERSEY INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK ATTACKS; SECURITY ADMINISTRATORS; SEMANTIC QUERIES; SEMANTIC SCHEMES;

COMPUTER NETWORKS; INFORMATION ANALYSIS; SEMANTICS;

SECURITY OF DATA;

EID: 24144468632     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. C. Fillmore, Syntax and Semantics 8: Grammatical Relations, Academic Press, New York, pp.59-81, 1997.
2. W. Cook, Case Grammar Theory, Washington, DC: Georgetown University Press, 1989.
3. D. Curry and H. Debar, Intrusion Detection Message Exchange Format, http://www.ietf.org/mtemet-drafts/draft-ietf-idwg-idmef-xml-03.txt.
4. L. Vanderwende, The analysis of noun sequences using semantic information extracted from on-line dictionaries, Ph.D. dissertation, Georgetown University, Washington, DC, 1996.
5. D. Andersson, M. Fong, and A. Valdes, "Heterogeneous Sensor Correlation: A Case Study of Live Traffic Analysis," IEEE Info. Assurance Workshop, US Military Academy, June 2002.
6. O. M. Dain and R. K. Cunningham, "Building Scenarios from a Heterogeneous Alert Stream," IEEE Workshop on Info. Assurance and Security, USMilitary Academy, pp.5-6, June 2001.
7. P. Ning, Y. Cui, D. S. Reeves, "Constructing Attack Scenarios through Correlation of Intrusion Alerts," Proceedings of the 9th ACM Conf. on Computer & Communications Security, pp.245-254.
8. H. Debar, A. Wespi, "Aggregation and correlation of intrusion-detection alerts," Workshop on Recent Advances in Intrusion Detection (RAID), pp.85-103, 2001.
9. A. Valdes, K. Skinner, "Probabilistic alert correlation," Workshop on Recent Advances in Intrusion Detection, pp.54-68, 2001.
10. www.ll.mit.edu/IST/ideval/data/2000/LLS_DDOS_1.0.html.
11. http://www.Snort.org.
12. T. Berners-Lee, Semantic web road map, Internal note, 1998, See http://www.w3.org/DesignIssues/Semantic.html.
13. V. Raskin, et al., "Why NLP should move into IAS," Proc. of the Workshop on a Roadmap for Comp. Linguistics, pp. 1 -7, 2002.
14. www.cerias.purdue.edu.
15. V. Raskin et al. "Ontology in Information Security: A Useful Theoretical Foundation and Methodological Tool," New Security Paradigms Workshop, Sept. 10-13, pp. 53-59, 2001.
16. U. Shah, T. Finin, A. Joshi, "Information retrieval on the semantic web," Conf. on Lifo, and Knowledge Mgmt, pp. 461-468, 2002.
17. B. Aleman-Meza, C. Halaschek, I. B. Arpinar, A Sheth, "Context-Aware Semantic Association Ranking," Proceedings of the First International Workshop on Semantic Web and Databases, Berlin, Germany, September 7-8, pp. 33-50, 2003.
18. C. Rocha, et.al., "A hybrid approach for searching in the semantic web", Proc. of the 13th Conf. on World Wide Web, pp.374-383, 2004.