Implementing consistency checking in correlating attacks

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3347, Issue , 2004, Pages 379-384

  Sarda, Kaushal ^a   Wijesekera, Duminda ^a   Jajodia, Sushil ^b  

^a Capgemini   (India)

^b George Mason University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK SECURITY; DISTRIBUTED COMPUTER SYSTEMS;

ATTACK SEQUENCES; CHECK-IN; CONDITION; CONSISTENCY CHECKING; VULNERABILITY ANALYSIS;

STATIC ANALYSIS; NETWORK SECURITY;

EID: 35048902643     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-30555-2_44     Document Type: Article

References (7)

1. Computer Oracle and Password System (COPS) information and software on the web at 〈ftp.cert.org/pub/tools/cops〉.
2. Internet Security Systems, System Scanner information at 〈http://www.iss.net〉.
3. Network Associates, CyberCop Scanner information at 〈http://www.nai. com/ asp_set/products/tns/ccscanner_intro.asp〉.
4. Ronald W. Ritchey and Paul Ammann. "Using model checking to analyze network vulnerabilities." In Proceedings 2000 IEEE Computer Society Symposium on Security and Privacy, 156-165, Oakland, CA, May 2000.
5. F. Cuppens et A. Miège, Alert correlation in a cooperative intrusion detection framework." IEEE Symposium on Research in Security and Privacy, Oakland, Mai 2002.
6. http://www.swi-prolog.org
7. Peng King, Yun Cui, Douglas S. Reeves, Analyzing Intensive Intrusion Alerts Via Correlation," in Proceedings of the 5th International Symposium on Recent Advances in Intrusion Detection (RAID 2002), LNCS 2516, pages 74-94, Zurich, Switzerland, October 2002.