IDS interoperability and correlation using IDMEF and commodity systems

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2513, Issue , 2002, Pages 252-264

  Carey, Nathan ^a   Clark, Andrew ^a   Mohay, George ^a  

^a QUEENSLAND UNIVERSITY OF TECHNOLOGY   (Australia)

Author keywords

Correlation; Data analysis; Interoperability; Intrusion detection; Network management

Indexed keywords

CORRELATION METHODS; DATA REDUCTION; INFORMATION MANAGEMENT; INTRUSION DETECTION; NETWORK MANAGEMENT; NETWORK SECURITY; PROGRAM DEBUGGING;

COMMODITY SYSTEMS; CORRELATION ANALYSIS; DETECTING ATTACKS; INTRUSION ANALYSIS; INTRUSION DETECTION MESSAGE EXCHANGE FORMATS; INTRUSION DETECTION SYSTEMS; RELATIONAL DATABASE; SECURITY VULNERABILITIES;

INTEROPERABILITY;

EID: 35048884551     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-36159-6_22     Document Type: Conference Paper

References (10)

1. Frederic Cuppens. Managing alerts in a multi-intrusion detection environment. In Annual Computer Security Applications Conference (ACSAC 2001), Sheraton New Orleans, Louisiana, USA, December 10-14 2001. ACM.
2. Frederic Cuppens and Alexandre Miege. Alert correlation in a cooperative intrusion detection framework. In 2002 IEEE Symposium on Security and Privacy (S&P’02), pages 187–202, Berkeley, CA, USA, May 12 - 15 2002.
3. Frederic Cuppens and Rodolphe Ortalo. Lambda: A language to model a database for detection of attacks. In Third International Workshop on Recent Advances in Intrusion Detection, (RAID 2000), volume 1907 of LNCS, pages 197–216, Toulouse, France, October 2-4 2000. Springer.
4. Herve Debar and Andreas Wespi. Aggregation and correlation of intrusiondetection alerts. In Proceedings of the 4th International Symposiun on Recent Advances in Intrusion Detection (RAID 2001), volume 2212 of LNCS, pages 85–103, Davis, CA, October 2001. Springer-Verlag.
5. Jon Doyle, Isaac Kohane, William Long, Howard Shrobe, and Peter Szolovits. Agile monitoring for cyber defense. In Proceedings of the DARPA Information Survivability Conference and Exposition (DISCEX-II), Anaheim, California, June 12-14 2001. IEEE.
6. John McHugh. Intrusion and intrusion detection. International Journal of Information Security, 1:14–35, 2001.
7. Marcus Ranum. Coverage in intrusion detection systems. Technical report, NFR Security, Inc, 26th June 2001.
8. Brian Tung. The common intrusion specification language: A retrospective. In Proceedings of the DARPA Information Survivability Conference and Exposition (DISCEX), 2000, pages 3–11, Hilton Head, SC, 2000. IEEE.
9. Alfonso Valdes and Keith Skinner. Probabilistic alert correlation. In Proceedings of the 4th International Symposiun on Recent Advances in Intrusion Detection (RAID 2001), volume 2212 of LNCS, pages 54–68, Davis, CA, October 2001. Springer- Verlag.
10. G. Vigna, R.A. Kemmerer, and P. Blix. Designing a Web of Highly-Configurable Intrusion Detection Sensors. In Proceedings of the 4th International Symposiun on Recent Advances in Intrusion Detection (RAID 2001), volume 2212 of LNCS, pages 69–84, Davis, CA, October 2001. Springer-Verlag