Intrusion Detection with data Correlation Relation Graph

ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings

Volumn , Issue , 2008, Pages 982-989

  Hassanzadeh, Amin ^a   Sadeghian, Babak ^a  

^a AMIRKABIR UNIVERSITY OF TECHNOLOGY   (Iran)

Author keywords

[No Author keywords available]

Indexed keywords

DATA CORRELATIONS; DETECTION RATES; FALSE ALARM RATE; INTERNATIONAL CONFERENCES; INTRUSION DETECTION SYSTEMS; NETWORK-BASED INTRUSION DETECTION SYSTEMS; REGRESSION LINES; SECURITY PARAMETERS; STATISTICAL CORRELATION METHODS;

ALARM SYSTEMS; COMPUTER CRIME; CORRELATION METHODS; FOOD PROCESSING; GRAPH THEORY; PARAMETER ESTIMATION; SECURITY OF DATA; SENSORS; SIGNAL DETECTION; STATISTICAL METHODS;

INTRUSION DETECTION;

EID: 49049092397     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2008.119     Document Type: Conference Paper

References (14)

1. Christopher Kruegel, Fredrik Valeur, Govanni Vigna, Intrusion Detection and Correlation: Challenges and Solutions, Springer (2005)
2. T. Chyssler, S. Nadjm-Tehrani, "Alarm Reduction and Correlation in Defence of IP Networks", Proceedings of the 13th International Workshops on Enabling Technologies (WETICE04), IEEE Computer Society, June (2004), pp. 229-234
3. T. Chyssler, S. Burschka, "Alarm Reduction and Correlation in Intrusion Detection Systems", Proceedings of Detection of Intrusions and Malware & Vulnarability Assessment workshop (DIMVA), Gesellschaft f r Informatik, June (2004), pp. 9-24
4. U. Zurutuza and R. Uribeetxeberria, "Intrusion Detection Alarm Correlation: A Survey", Proceedings of the IADAT International Conference on Telecommunications and Computer Networks, 1-3 December, 2004
5. P. Ning, Y. Cui, and D.S. Reeves. "Constructing attack scenarios through correlation of intrusion alerts", Proceeding of the 9th ACM Conference on Computer & Communications Security, pages 245-254, Nov. 2002.
6. D. Xu, P. Ning, "Alert Correlation through Triggering Events and Common Resources", 20th Annual Computer Security Applications Conference, December 2004
7. Valdés, A., and Skinner, K., "Probabilistic Alert Correlation", Proceedings of the 4th International Symposium on Recent Advances in Intrusion detection (RAID), Springer Verlang, California, USA, 2001, pp. 54-68
8. Carl Endorf, Eugene Schult, Jim Mellander, Intrusion Detection & Prevention, McGraw-Hill, (2004)
9. Amin Hassanzadeh, Babak Sadeghian, "Anomaly Intrusion Detection with Data Correlation Relation Graph", Proceeding of the 11th International CSI Computer Conference (CSICC' 2006), Tehran, Iran, Jan. 24-26, 2006 [In Persian]
10. Christopher L. Schuba, Ivan V. Krsul,et al., "Analysis of a denial of service attack on TCP", IEEE Computer Society Press, May (2000)
11. J.W. Haines, R.P. Lippmann, et al., "1999 DARPA Intrusion Detection Evaluation: Design and Procedures", Technical report 1062, Lincoln Laboratory, MIT university, 26 February (2001)
12. Anton Chuvakin, "Event Correlation in Security", whitepaper, www.securitydocs.com, May (2004)
13. T. T. Soong, Fundamentals of Probability and Statistics for Engineers, John Wiley and Sons Ltd, (2004)
14. Http://kdd.ics.uci.edu/databases/kddcup99/task.html