A data mining approach to generating network attack graph for intrusion prediction

Proceedings - Fourth International Conference on Fuzzy Systems and Knowledge Discovery, FSKD 2007

Volumn 4, Issue , 2007, Pages 307-311

  Li, Zhi Tang ^a   Lei, Jie ^a   Wang, Li ^a   Li, Dong ^a  

^a HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

ATTACK GRAPHS; INTRUSION ALERTS; PREDICTABILITY SCORES;

CORRELATION METHODS; GRAPH THEORY; INTRUSION DETECTION; MODEL CHECKING;

DATA MINING;

EID: 44049099987     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/FSKD.2007.15     Document Type: Conference Paper

References (13)

1. S. A. Agrawal R., Imielinski T. Mining association rules between sets of items in large databases. In Proceedings of the ACM SIGMOD Conference on Management of Data, pages 207-216, 1993.
2. F. Cuppens and A. Miege. Alert correlation in a cooperative intrusion detection framework. Proceedings 2002 IEEE Symposium on Security and Privacy, page 202, Berkeley, CA, USA, 2002. IEEE Comput. Soc.
3. C. W. G. Goldman and R. P. Plan recognition in intrusion detection systems. In Proceedings of the DARPA Information Survivability Conference and Exposition (DISCEX II' 01), Anaheim,California, 2001.
4. K. Julisch and M. Dacier. Mining intrusion detection alarms for actionable knowledge. In A CM Conference on Knowledge Discovery and Data Mining, pages 366-375, 2002.
5. W. Lee and X. Qin. Statistical causality analysis of infosec alert data. In Proceedings of the International Symposium on the Recent Advances in Intrusion Detection(RAID 2003), pages 73-94. Springer-Verlag, 2003.
6. P. Ning, Y. Cui, D. S. Reeves, and D. Xu. Techniques and tools for analyzing intrusion alerts. ACM Transactions on Information and System Security, 7(2):274, 2004.
7. S. J. R. L. Oleg Sheyner, Joshua Haines and J. M. Wing. Automated generation and analysis of attack graphs. In Proceedings of the 2002 IEEE Symposium on Security and Privacy (SP 2002), pages 273-284, 2002.
8. D. W. P. Ammann and S. Kaushik. Scalable, graph-based network vulnerability analysis. In Proceedings of 9th A CM Conference on Computer and Communications Security, Washington, DC, November 2002.
9. C. Phillips and L. P. Swiler. A graph-based system for network-vulnerability analysis. In Proceedings of the 1998 workshop on New security paradigms. ACM Press.
10. J. J. T. Thurimella and Ramakrishna. A framework for the application of association rule mining in large intrusion detection infrastructure. In Proceedings of the International Symposium on the Recent Advances in Intrusion Detection(RAID 2006), pages 1-18, 2006.
11. S. S. Wenke Lee. Data mining approaches for intrusion detection. In Proceedings of the 7th USENIX Security Symposium, pages 79-94, 1998.
12. W. F. B. Xinming Ou and M. A. McQueen. A scalable approach to attack graph generation. In ACM Conference on Computer and Communications Security 2006, Alexandria, Virginia, USA.
13. W. L. Xinzhou Qin. Attack plan recognition and prediction using causal networks. In Proceedings of The 20th Annual Computer Security Applications Conference (ACSAC 2004), pages 370-379, Tucson,Arizona, December 2004.