Selecting appropriate counter-measures in an intrusion detection framework

Proceedings of the Computer Security Foundations Workshop

Volumn 17, Issue , 2004, Pages 78-87

  Cuppens, Frédéric ^a   Gombault, Sylvain ^a   Sans, Thierry ^a  

^a ECOLE DES MINES DE NANTES   (France)

Author keywords

Anti correlation; Correlation; Counter measures; IDMEF; Intrusion detection; Response

Indexed keywords

COMPUTATIONAL COMPLEXITY; COMPUTER GRAPHICS; DATA ACQUISITION; PROBLEM SOLVING; SECURITY OF DATA;

ANTI-CORRELATION; COUNTER MEASURES; COUNTER-MEASURES; DETECTION FRAMEWORK; INTRUSION DETECTION;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 4944234105     PISSN: 10636900     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (13)

1. R. Bace. Intrusion Detection. McMillan, 2000.
2. S. Benferhat, F. Autrel, and F. Cuppens. Enhanced correlation in a intrusion detection process. In Mathematical Methods, Models and Architecture for Computer Network Security (MMM-A CNS 2003), St Petersburg, Russia, September 2003.
3. F. Cuppens, F. Autrel, A. Miège, and S. Benferhat. Recognizing malicious intention in an intrusion detection process. In Second International Conference on Hybrid Intelligent Systems, Santiago, Chili, December 2002. Special session: "Hybrid Intelligent Systems for Intrusion Detection".
4. Frédéric Cuppens. Managing alert in a cooperative intrusion detection environnement. In 17th Annual Computer Security Applications Conference (ACSAC),New-Orleans, LA, December 2001.
5. Frédéric Cuppens and Alexandre Miège. Alert correlation in a cooperative intrusion detection framework. In Proceedings of the IEEE Symposium on Research in Security and Privacy, Oakland, CA, May 2002.
6. Frédéric Cuppens and Rodolphe Ortalo. Lambda: A language to model a database for detection of attacks. In H. Debar, L. Mé, and S. F. Wu, editors, Proceedings of the Third International Workshop on the Recent Advances in Intrusion Detection (RAID'2000), number 1907 in LNCS, pages 197-216, October 2000.
7. Sylvain Gombault and Mamadou Diop. Response function. In 1st Symposium on Real Time Intrusion Detection (NATO), Lisbon, Portugal, May 2002.
8. Klaus Julisch. Mining alarm clusters to improve alarm handling efficiency. In 17th Annual Computer Security Applications Conference (ACSAC), New-Orleans, LA, December 2001.
9. Peng Ning and Dingbang Xu. Learning attack strategies from intrusion alerts. In 10th ACM Conference on Computer and Communication Security, Washington, DC, 2003.
10. S. Northcutt and J. Novak. Network Intrusion Detection. Paperback, 1999.
11. Mike Petkac and Lee Badger. Security agility in response to intrusion detection. In 16th Annual Computer Security Applications Conference (ACSAC), New-Orleans, LA, 2000.
12. Martin Roesch. Snort - lightweight intrusion detection for networks. In Proceedings of LISA '99: I3th Systems Administration Conference, Seattle, Washington, USA, November 7-12 1999.
13. H.C.M De Swart. Mathematics, Language, Computer Science and Philosophy, volume 2. Peter Lang, 1994.