A framework of attacker centric cyber attack behavior analysis

IEEE International Conference on Communications

Volumn , Issue , 2007, Pages 1449-1454

  Peng, Xuena ^a   Zhao, Hong ^a  

^a NORTHEASTERN UNIVERSITY   (China)

Author keywords

Alert correlation; Attack behavior; Behavior analysis; Intrusion detection; Network security

Indexed keywords

ALGORITHMS; BEHAVIORAL RESEARCH; DATA STRUCTURES; INTRUSION DETECTION; NETWORK SECURITY;

ALERT CORRELATION; ATTACK BEHAVIOR;

COMPUTER CRIME;

EID: 38549131427     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2007.243     Document Type: Conference Paper

References (12)

1. Valdes, A. and K. Skinner, an approach to sensor correlation, in the 3rd International Workshop on Recent Advances in Intrusion Detection. 2000, Springer-Verlag: Toulouse, France.
2. Ning, P., et al., Techniques and tools for analyzing intrusion alerts. ACM Trans. Inf. Syst. Secur., 2004. 7(2): p. 274-318.
3. Cuppens, F. and A. Miege. Alert Correlation in a Cooperative Intrusion Detection Framework. in the 2002 IEEE Symposium on Security and Privacy. 2002. Oakland, California, USA: IEEE Computer Society.
4. Morin, B. and H. Debar. Correlation of Intrusion Symptoms: an Application of Chronicles, in the 6th International Symposium on Recent Advances in Intrusion Detection. 2003. Pittsburgh, PA, USA: Springer-Verleg.
5. Qin, X., A Probabilistic-Based Framework for INFOSEC Alert Correlation. 2005, Georgia Institute of Technology.
6. Goldman, R., et al. Information Modeling for Intrusion Report Aggregation. in the DARPA Information Survivability Conference and Exposition (DISCEX II). 2001. 2001.
7. Yu, D. and D. Frincke. A Novel Framework for Alert Correlation and Understanding. in Applied Cryptography and Network Security, Second International Conference (ACNS 2004). 2004.
8. Burroughs, D., L. Wilson, and G. Cybenko. Analysis of Distributed Intrusion Detection Systems Using Bayesian Methods. in IEEE International Performance Computing and Communications Conference. 2002.
9. Dain, O. and R. Cunningham, Building Scenarios from a Heterogeneous Alert Stream. IEEE Transactions on Systems, Man and Cybernetics, 2002.
10. Christopher, K., R. William, and V. Giovanni, Using Alert Verification to Identify Successful Intrusion Attempts. Journal of Practice in Information Processing and Communication (PIK), 2004. 27(4).
11. TIAA's homepage, http://discovery.csc.ncsu.edu/software/ correlator/
12. Ning, P. and Y. Cui, An Intrusion Alert Correlator Based on Prerequisites of intrusions. 2002, Department of Computer Science, North Carolina State University.