Integrated vulnerability management system for enterprise networks

Proceedings - 2005 IEEE International Conference on e-Technology, e-Commerce and e-Service, EEE-05

Volumn , Issue , 2005, Pages 698-703

  Wu, William ^a   Yip, Frederick ^a   Yiu, Eunice ^a   Ray, Pradeep ^a  

^a UNIVERSITY OF NEW SOUTH WALES   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SOFTWARE; PROBLEM SOLVING; RISK MANAGEMENT; SOCIETIES AND INSTITUTIONS; STANDARDS;

ENTERPRISE NETWORKS; INTEGRATED VULNERABILITY MANAGEMENT (IVM); MICROSOFT (CO); NETWORK VULNERABILITIES;

COMPUTER NETWORKS;

EID: 30944464009     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (12)

1. Lawrence A. Gordon, Martin P. Loeb, William Lucyshyn and Robert Richardson, "2004 CSI/FBI Computer Crime and Security Survey - Ninth Annual", Computer Security Institute, 2004.
2. CERT Coordination Center, September 2004 http://www.cert.org
3. Standards Australia, "Information Technology - Security techniques - Evaluation criteria for IT Security", AS ISP/IEC 15408, 2004
4. CERT Coordination Center, "CERT/CC Statistics 1988-2004", September 2004, http://www.cert.org/stats/cert_stats.html
5. P.E. Proctor, "The Practical Intrusion Detection Handbook", Prentice Hall, 2001
6. C. Kruegel, W. Robertson, "Alert Verification - Determining the Success of Intrusion Attempts", September 2004, http://www.infosecwriters.com/hhworld/hh8/ava.txt.
7. CERT Coordination Center, "Malicious Code Propagation and Anti-virus Software Updates", May 2004, http://www.cert.org/incident_notes/IN-2003-01.html
8. K. Anagnostakis, M. Greenwald, S. Ioannidis, A. Keromytis, D. Li, "A Cooperative Imminuzation System for an Untrusting Internet", IEEE ICON 2003
9. The Internet Engineering Task Force (IETF), "The Intrusion Detection Message Exchange Format Internet-Draft", October 2004, http://www.ietf.org/internet-drafts/draft-ietf-idwg-idmef-xml-12.txt.
10. Distributed Management Task Force (DMTF), October 2004, http://www.dmtf.org/home.
11. The MITRE Cooperation, "How we build the CVE list", May 2004, http://www.cve.mitre.org/about/list.html
12. The MITRE Cooperation, "The Open Vulnerability Assessment Language", October 2004, http://oval.mitre.org.