A temporal logic based framework for intrusion detection

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3235, Issue , 2004, Pages 359-375

  Naldurg, Prasad ^a   Sen, Koushik ^a   Thati, Prasanna ^a  

^a University of Illinois at Urbana Champaign   (United States)

Author keywords

Intrusion detection; Runtime monitoring; Security; Temporal logic

Indexed keywords

COMPUTER CIRCUITS; MERCURY (METAL); NETWORK COMPONENTS; NETWORK SECURITY; RECONFIGURABLE HARDWARE; SPECIFICATIONS; TEMPORAL LOGIC;

INTRUSION PATTERNS; LOGIC-BASED FRAMEWORKS; ONLINE MONITORING; RECURSIVE EQUATIONS; RUNTIME MONITORING; SECURITY; SECURITY ATTACKS; TEMPORAL LOGIC SPECIFICATIONS;

INTRUSION DETECTION;

EID: 35048890071     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-30232-2_23     Document Type: Article

References (22)

1. D. Anderson, T. Privold, and A. Valdes. Next-generation intrusion detection expert system. Technical Report SRI-CSL-95-07, Computer Science Laboratory, SRI International, Menlo Park, CA, May 1995.
2. S. Axelsson. Intrusion detection systems: A taxonomy and survey. Technical Report 99-15, Dept. of Computer Engineering, Chalmers University of Technology, Sweden, 2000.
3. H. Barringer, A. Goldberg, K. Havelund, and K. Sen. Program monitoring with Itl in eagle. In Workshop on Parallel and Distributed Systems: Testing and Debugging (PADTAD'04) (Satellite workshop of IPDPS'04), Santa Fe, New Mexico, USA, April 2004. (To Appear).
4. H. Barringer, A. Goldberg, K. Havelund, and K. Sen. Rule-based runtime verification. In Proceedings of 5th International Conference on Verification, Model Checking and Abstract Interpretation (VMCAI'04), Volume 2937 of Lecture Notes in Computer Science, pages 44-57, Venice, Italy, January 2004. Springer-Verlag.
5. E. M. Clarke, O. Grumberg, and D. A. Peled. Model Checking. MIT Press, 1999.
6. H. Debar, M. Becker, and D. Siboni. A neural network component for an intrusion detection system. In IEEE Computer Society Symposium on Research on Security and Privacy, pages 240-250, May 1992.
7. H. Debar, M. Dacier, and A. Wespi. Towards a taxonomy of intrusion detection systems. Computer Networks, 31(8):805-822, April 1999.
8. K. Havelund and G. ROS.U. Monitoring Java Programs with Java PathExplorer. In Proceedings of Runtime Verification (RV'Ol), Volume 55 of ENTCS. Elsevier, 2001.
9. J. P. Ignizio. Introduction to Expert Systems-the Development and Implementation of Rule-Based Expert System. McGraw-Hill Science, 1991.
10. K. Ilgun, R. Kemmerer, and P. Porras. State transition analysis: A rulebased intrusion detection approach. IEEE Transactions on Software Engineering, 21(3):181-199, 1995.
11. C. Ko, M. Ruschitzka, and K. Levitt. Execution monitoring of security-critical programs in distributed systems: A specification-based approach. In IEEE Symposium on Security and Privacy, pages 175-187, May 1997.
12. S. Kumar and E. Spafford. A pattern matching model for misuse intrusion detection. In National Computer Security Conference, pages 11-21, 1994.
13. MIT Lincoln Laboratory. DARPA intrusion detection evaluation. http://www.ll.mit.edu/IST/ideval/.
14. W. Lee. A datamining framework for building intrusion detection models. In IEEE Symposium on Security and Privacy, pages 120-132, May 1999.
15. P. Porras and P. Neumann. EMERALD: Event monitoring enabling responses to anomalous live disturbances. In National Information Systems Security Conference, 1997.
16. M. Roger and J. Goubault-Larrecq. Log auditing through model-checking. In 14th IEEE Computer Security Foundations Workshop (CSFW'Ol). IEEE, 2001.
17. M. Sebring, E. Shellhouse, M. Hanna, and R. Whitehurst. Expert systems in intrusion detection: A case study. In National Computer Security Conference, pages 74-81, 1998.
18. K. Sen, G. Roşu, and G. Agha. Runtime Safety Analysis of Multithreaded Programs. In 9th European Software Engineering Conference, and 11th ACM SIGSOFT International Symposium on the Foundations of Software Engineering (ESEC/FSE'03), pages 337-346, Helsinki, Finland, September 2003. ACM.
19. K. Sen, G. ROS.U, and G. Agha. Online efficient predictive safety analysis of multithreaded programs. In Proceedings of 10th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS'04), Volume 2988 of LNCS, pages 123-138, Barcelona, Spain, March 2004.
20. K. Sen, A. Vardhan, G. Agha, , and G. Roşu. Efficient decentralized monitoring of safety in distributed systems. In Proceedings of 26th International Conference on Software Engineering (ICSE'04), pages 418-427, Edinburgh, UK, May 2004. IEEE.
21. H. Teng, K. Chen, and S. Lu. Security audit trail analysis using inductively generated predictive rules. In Conference on Artificial Intelligence Applications, pages 24-29. IEEE Computer Society Press, March 1990.
22. D. Wagner and D. Dean. Intrusion detection via static analysis. In IEEE Symposium on Security and Privacy, 2001.