Real-time multistage attack awareness through enhanced intrusion alert clustering

Proceedings - IEEE Military Communications Conference MILCOM

Volumn 2005, Issue , 2005, Pages

  Mathew, Sunu ^a   Britt, Daniel ^a   Giomundo, Richard ^a   Upadhyaya, Shambhu ^a   Sudit, Moises ^a   Stotz, Adam ^a  

^a State University of New York at Buffalo ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CYBER-ATTACKS; INTRUSION DETECTION SENSOR; MULTISTAGE ATTACKS; SITUATION AWARENESS;

REAL TIME SYSTEMS; SECURITY OF DATA; SECURITY SYSTEMS; SENSORS;

COMPUTER CRIME;

EID: 33847407583     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MILCOM.2005.1605934     Document Type: Conference Paper

References (12)

1. Stefan Axelsson. Intrusion Detection Systems: A Taxonomy and Survey. Technical Report No 99-15, Dept. of Computer Engineering, Chalmers University of Technology, Sweden, March 2000.
2. Sunu Mathew, Chintan Shah and Shambhu Upadhyaya. An Alert Fusion Framework for Situation Awareness of Coordinated Multistage Attacks. In Proceedings of the 3rd IEEE International Information Assurance Workshop (IWIA 2005), College Park, Maryland, March 2005, Pages 95-104.
3. John D. Howard and Thomas A. Longstaff. A Common Language for Computer Security Incidents. Technical Report SAND98-8667, Sandia National Laboratories, October 1998.
4. Jeffrey Undercoffer and John Pinkston. Modeling Computer Attacks: A Target-Centric Ontology for Intrusion Detection. In 2002 CADIP Research Symposium, October 2002.
5. P.G. Neumann and D. B. Parker. A Summary of Computer Misuse Techniques. In Proceedings of the 12th National Computer Security Conference, Baltimore, Maryland, October 1989, Pages 396-407.
6. U. Lindqvist and E. Jonsson. How to Systematically Classify Computer Security Incidents. In Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, May 1997, Pages 154 -163.
7. John J. Salerno, Michael Hinman, Douglas Boulware. Building a Framework for Situation Awareness. In Proceedings of the International Society on Information Fusion (ISIF) Conference, Stockholm, Sweden, 2004.
8. John J. Salerno, George Tadda, Michael Hinman and Samuel Gorton. Achieving Situation Awareness in a Cyber Environment. To appear at SIMA 2005, MILCOM 2005, Atlantic City, NJ, October 2005.
9. Edward G. Amoroso. Fundamentals of Computer Security Technology. Prentice-Hall PTR, 1994.
10. Joel Scambray, Stuart McClure, George Kurtz. Hacking Exposed: Network Security Secrets and Solutions. Osborne/McGraw-Hill, 2001.
11. SNORT http://sourceforge.net/projects/snort-idmef
12. The Intrusion Detection Message Exchange Format. http://www.ietf.org/ internet-drafts/draft-ietf-idwg-idmef-xml-14.txt