Formal specication of intrusion signatures and detection rules

Proceedings of the Computer Security Foundations Workshop

Volumn 2002-January, Issue , 2002, Pages 64-74

  Pouzol, J P ^a   Ducasse M ^a  

^a CAMPUS DE BEAULIEU   (France)

Author keywords

Algorithm design and analysis; Computer security; Data structures; Detection algorithms; Expert systems; Intrusion detection; Knowledge based systems; Pattern matching; Petri nets; Writing

Indexed keywords

ALGORITHMS; CRYPTOGRAPHY; DATA STRUCTURES; EXPERT SYSTEMS; FORMAL LANGUAGES; KNOWLEDGE BASED SYSTEMS; MERCURY (METAL); NETWORK SECURITY; PATTERN MATCHING; PETRI NETS; SECURITY OF DATA; SECURITY SYSTEMS; SIGNAL DETECTION; TECHNICAL WRITING;

ALGORITHM DESIGN AND ANALYSIS; ATTACK SCENARIOS; DETECTION ALGORITHM; EXISTING SYSTEMS; INTRUSION SIGNATURES; MISUSE INTRUSION DETECTIONS; SECURITY OFFICERS; SOUND AND COMPLETE;

INTRUSION DETECTION;

EID: 33847105800     PISSN: 10636900     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSFW.2002.1021807     Document Type: Conference Paper

References (18)

1. S. Chakravarthy, V. Krishnaprasad, E. Anwar, and S.-K. Kim. Composite Events for Active Databases: Semantics, Contexts and Detection. In Proceedings of the 20th International Conference on Very Large DataBases (VLDB94), 1994.
2. Common Vulnerabilities and Exposures (CVE). CVE-1999-0442. http://cve.mitre.org.
3. F. Gérard. Définition et implémentation d'un langage d'analyse d'audittrails. Mémoire pour obtention du grade de Licencié en Informatique - Faculté Universitaire Notre-Dame de la Paix, Namur, Belgium - http://www.info.fundp.ac.be/~vle/asax/publications.html, 1998.
4. N. Habra, B. L. Charlier, A. Mounji, and I. Mathieu. ASAX: Software Architecture and Rule-based Language for Universal Audit Trail Analysis. In Proceedings of the 2nd European Symposium on Research in Computer Security (ESORICS). Springer-Verlag, 1992.
5. J. McDonald. Really silly ff.core exploitfor Solaris. http://www.cotse.com/sw/solaris/2.6/ffcore.txt.
6. S. Kumar and E. Spafford. A Pattern Matching Model for Misuse Intrusion Detection. In Proceedings of the 17th National Computer Security Conference, pages 11-21, 1994.
7. J.-L. Lin, X. S. Wang, and S. Jajodia. Abstraction-Based Misuse Detection: High-Level Specifications and Adaptable Strategies. In Proc. of the 11th Computer Security Foundations Workshop. IEEE Computer Society Press, 1998.
8. U. Lindqvist and P. Porras. Detecting Computer and Network Misuse Through the Production-Based Expert System Toolset (P-BEST). In Proceedings of the IEEE Symposium on Security and Privacy, 1999.
9. F. Pereira and D. Warren. Parsing as deduction. In Proceedings of the 21st Annual Meeting of the Association for Computational Linguistic (ACL), 1983.
10. J.-P. Pouzol and M. Ducassé. From declarative signatures to misuse ids. In W. Lee, L. Mé, and A. Wespi, editors, Proceedings of the 4th International Symposium on Recent Advances in Intrusion Detection, volume 2212 of LNCS. Springer-Verlag, 2001.
11. M. Roesch. Snort - Lightweight Intrusion Detection fo Networks. In Proceedings of USENIX LISA'99 conference, 1999.
12. M. Roger and J. Goubault-Larrecq. Log Auditing through Model-Checking. In Proceeding of the 14th Computer Security Foundations Workshop. IEEE Computer Society Press, 2001.
13. S. Shieber, Y. Schabes, and F. Pereira. Principle and Implementation of Deductive Parsing. The Journal of Logic Programming, 24(1-2), 1995.
14. K. Sikkel. Parsing Schemata. PhD thesis, University of Twente, Enschede, the Netherlands, 1993.
15. K. Sikkel and A. Nijholt. Parsing of Context Free Languages. In G.Rozenberg and A. Salomaa, editors, Handbook of Formal Languages, volume 2. Springer-Verlag, 1996.
16. Sun MicroSystem. SunSHIELD Basic Security Module Guide, Feb 2000. Part Number 806-1789-10.
17. P. Uppuluri and R. Sekkar. Experiences with Specification-Based Intrusion Detection. In W. Lee, L. Mé, and A. Wespi, editors, Proceedings of the 4th International Symposium on Recent Advances in Intrusion Detection (RAID), volume 2212 of LNCS. Springer-Verlag, 2001.
18. G. Vigna, S. Eckmann, and R. Kemmerer. The STAT Tool Suite. In Proceedings of DISCEX 2000. IEEE Computer Society Press, jan 2000.