Enhanced correlation in an intrusion detection process

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2776, Issue , 2003, Pages 157-170

  Benferhat, Salem ^a   Autrel, Fabien ^b   Cuppens, Frédéric ^c  

^a UNIVERSITÉ D'ARTOIS   (France)

^b ONERA   (France)

^c IRIT   (France)

Author keywords

[No Author keywords available]

Indexed keywords

MERCURY (METAL); NETWORK SECURITY;

COMPARISON OPERATORS; CORRELATION RELATIONS; INTRUSION SCENARIOS; LOGICAL PREDICATE; PRE AND POST CONDITIONS;

INTRUSION DETECTION;

EID: 35248849693     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-45215-7_13     Document Type: Article

References (9)

1. Cuppens, F. and Miège, A.: Alert Correlation in a Cooperative Intrusion Detection Framework. In IEEE Symposium on Security and Privacy, Oakland, USA (2002)
2. Cuppens, F., Autrel, F., Miège, A., Benferhat, S.: Recognizing malicious intention in an intrusion detection process. In Second International Conference on Hybrid Intelligent Systems (HIS'2002), Santiago, Chile (October 2002)
3. Geib, C. and Goldman, R.: Plan Recognition in Intrusion Detection Systems. In DARPA Information Survivability Conference and Exposition (DISCEX) (June 2001)
4. Geib, C. and Goldman, R.: Probabilistic Plan Recognition for Hostile Agents. In Florida AI Research Symposium (FLAIR) , Key-West, USA (2001)
5. Moulin, H.: Axioms of Cooperative Decision Making. Cambridge University Press, Cambridge (1988)
6. Debar, H. and Wespi, A.: The Intrusion Detection Console Correlation Mechanism. Workshop on the Recent Advances in Intrusion Detection (RAID'2001), Davis, USA (October 2001)
7. Mè, L., Marrakchi, Z., Michel, C., Debar, H. and Cuppens, F.: La detection d'intrusion: les outils doivent coopérer. REE journal
8. Huang, M.-Y.: A Large-scale Distributed Intrusion Detection Framework Based on Attack Strategy Analysis. Proceedings of the First Internationnal Workshop on the Recent Advances in Intrusion Detection (RAID'98), Louvain-La-Neuve, Belgium (1998)
9. Valdes, A. and Skinner, K.: Probabilistic Alert Correlation. In Fourth International Workshop on the Recent Advances in Intrusion Detection (RAID'2001), Davis, USA, October 2001. 171 (septembre 2002) 20