Analysis of log files intersections for security enhancement

Proceedings - Third International Conference onInformation Technology: New Generations, ITNG 2006

Volumn 2006, Issue , 2006, Pages 452-456

  Kowalski, Kazimierz ^a   Beheshti, Mohsen ^a  

^a CALIFORNIA STATE UNIVERSITY   (United States)

Author keywords

Data mining; Intrusion prevention; Log files; Security architectures

Indexed keywords

INTRUSION PREVENTION; LOG FILES; SECURITY ARCHITECTURES;

COMPUTER PROGRAMMING; COMPUTER SYSTEM FIREWALLS; DATA MINING; SERVERS; USER INTERFACES;

SECURITY OF DATA;

EID: 33750828913     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ITNG.2006.32     Document Type: Conference Paper

References (15)

1. Beasley, J.S., Networking, Pearson Education, Inc., Upper Saddle River, NJ, 2004
2. Buyer's guide for intrusion prevention systems (IPS). Retrieved June 3, 2004 from http://www.juniper.net/solutions/literature/buryer_guide/71000 5.pdf
3. CERT Coordination Center. CERT/CC statistics 1988-2004. Retrieved April 15, 2004 from http://www.cert.org/stats/cert_stats.html
4. Dunigan, Kinkel, Intrusion Detection and Intrusion Prevention on a Large Network. A case Study. Proceedings of the 1st Workshop on Intrusion Detection and Network Monitoring, April 9-12,1999, Santa Clara, California
5. Han, J., Kowalski, K., Beheshti, M.,Detecting Network Intrusions Based on a Generalized Rough Set Model. Proceedings of the International Symposium on Telecommunications IST-2005, Sept. 10-12, 2005, Shiraz, Iran, pp 247-252
6. Heady, R., Luger, G., Maccabe, A., Servilla, M., The architecture of a network level intrusion detection system. Technical report, Computer Science Department, University of New Mexico, August 1990.
7. Lee, W., Stolfo, S., Data Mining Approaches for Intrusion Detection, Proceedings of the Seventh USENK Security Symposium (SECURITY '98), San Antonio, TX, January 1998
8. Lee, W., Stolfo, S.J., Chan, P.K., Real Time Data Miningbased Intrusion Detection, Proc. Second DARPA Information Survivability Conference and Exposition, 2001, Retrieved from http://citeseer.ist.psu.edu/452795.html
9. Llinas, J., Data Fusion Overview. Retrieved January 6, 2006 from http://www.infofusion.buffalo.edu/tm/Dr.Llinas'stuff/DataFusi onOverview.ppt
10. Network intrusion prevention systems. Retrieved May 29, 2004 from http://www.networkintrusion.co.uk/inline.htm.
11. Nitro Data Systems. Intrusion prevention: A white paper. Retrieved July 30,2004 from http://www.bitpipe.com/detail/RES/1090433720_603.html?src =TRM_TOPN.
12. Ogren, E. Host intrusion prevention is the last line of defense for networks yankee group. 2004. Retrieved from http://www.csoonline.com/analyst/ report1265.html
13. Analyst, Securities, Services and Solutions. Retrieved April 29, 2004 from http://netsecurity.about.com/gi/dynamic/offsite.htm?zi=1/XJ&s dn=netsecurity&zu=http%3A%2F%2Fwww.csoonline.com%2 Fanalyst%Freport1265. html.
14. Sah, A., A New Architecture for Managing Enterprise Log Data, Proceedings of LISA 2002: Sixteen Systems Administration Conference, Berkeley, CA, pp. 121-132
15. Snyder, J., Newman, D., & Thayer, R. How we did it. Network World. Retrieved May 20, 2004 from http://www.nwfusion.com/reviews/2004/0216ipshow.html