Correlating multi-step attack and constructing attack scenarios based on attack pattern modeling

Proceedings of the 2nd International Conference on Information Security and Assurance, ISA 2008

Volumn , Issue , 2008, Pages 214-219

  Liu, Zhijie ^a   Wang, Chongjun ^a   Chen, Shifu ^a  

^a NANJING UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; COMPUTER NETWORKS; GRAPH THEORY; INFORMATION SERVICES; KNOWLEDGE BASED SYSTEMS; SECURITY OF DATA; STATISTICAL TESTS;

ATTACK SCENARIOS; MULTI-STEP;

BOOLEAN FUNCTIONS;

EID: 51349107350     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISA.2008.11     Document Type: Conference Paper

References (10)

1. Dain O., Cunningham R. K. Building scenarios from a heterogeneous alert stream. In: Proceedings of the IEEE SMC Information Assurance Workshop, West Point, NY, 2001.
2. th International Symposium on Recent Advances in Intrusion Detection. Lecture Notes in Computer Science. Spring-Verlag, 2001. 54-68.
3. Ning P., Cui Y., Reeves D.S., Xu D. Techniques and tools for analyzing intrusion alerts. ACM Transactions on Information and System Security, 2004, 7(2):274-318.
4. Cuppens F,Miege A. Alert Correlation in a Cooperative Intrusion Detection Framework, Proceedings of the IEEE Symposium on Security and Privacy, Oakland, California, USA, 2002.
5. Steven Cheung, Ulf Lindqvist and Martin W. Fong Modeling multistep cyber attacks for scenario recognition. The 3rd DARPA Information Survivability Conference and Exposition, Washington D.C., 2003.
6. th IEEE Computer Security Foundation Workshop, 49-63, Cape Breton, Nova Scotia, Canada, 2002.
7. th Annual Computer Security Applications Conference, 2004.
8. Eric Cole, Hackers Beware, New Riders Publishing, Indianapolis, 2001.
9. J.Haines, D.Ryder, L. Tinnel, and S. Taylor. Validation of sensor alert correlators. IEEE Security and Privacy, 2001.
10. MIT Lincoln Lab. 2000 DARPA intrusion detection scenario specific datasets. http://www.ll.mit.edu/IST/ideval/data/2000/2000_data_ index.html, 2000.