Modeling and analyzing dynamic forensics system based on intrusion tolerance

Proceedings - IEEE 9th International Conference on Computer and Information Technology, CIT 2009

Volumn 2, Issue , 2009, Pages 230-235

  Chen, Lin ^a   Li, Zhitang ^a   Gao, Cuixia ^a   Liu, Yingshu ^a  

^a HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

Author keywords

Intrusion deception; Intrusion tolerance; Network forensics; Semi Markov process

Indexed keywords

COMPUTER FORENSICS; EMBEDDED MARKOV CHAIN; FINITE STATE MACHINES; HONEYPOTS; INTRUSION DECEPTION; INTRUSION TOLERANCE; NETWORK FORENSICS; ON DYNAMICS; PROACTIVE DEFENSE; SEMI MARKOV PROCESS; SERVER SYSTEM; SYSTEM-BASED; TRANSITION MODEL;

INFORMATION TECHNOLOGY; MARKOV PROCESSES; NUMERICAL ANALYSIS; SERVERS;

INTRUSION DETECTION;

EID: 73549108733     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CIT.2009.108     Document Type: Conference Paper

References (12)

1. Digital Forensics Research Workshop. "A Road Map for Digital Forensics Research, technical Report", DFRWS, November 2001, pp. 15-20
2. Peter Sommer. "Intrusion Detection System as Evidence" . Recent Advances in Intrusion Detection-RAID 98.
3. Peter Stephenson. "The Application of Intrusion Detection Systems in a Forensic Environment" . Proceedings of the RAID2000 Conference, Toulouse, France, 2000.
4. Udo Payer. "Realtime Intrusion-forensics, a First Prototype Implementation" . TERENA Networking Conference, 2004.
5. McCarty B. Honeypot forensics part I: analyzing the network [EB/OL]. http://csdl.computer-r.org/comp/mags/sp/2004/04/j4072abs.htm.
6. Alec Yasinsac, YanetManzano. "Honeytraps, a Network Forensic Tool" . Sixth Multi-Conference on Systemics, Cybernetics and Informatics, Orlando, Florida, USA , July 14-18, 2002.
7. Raynal, F. Berthier , Y. Biondi, P. Kaminsky, D. "Honeypot Forensics". Proceedings from the Fifth Annual IEEE SMC 10-11 June 2004 page(s): 22-29.
8. Barbara Jones Redmon. "Maintaining Forensic Evidence for Law Enforcement Agencies form a Federation of Decoy Networks" (CCIPS) [EB/OL]. http://www.cybercrime.gov /searching.html.
9. Xia C H, Li X J, Zhao Q P. "Research on Intrusion-Deception-Based Dynamic Network Defense", Cinese Journal of computers, 2004, Vol. 27, No.12, 1585-1592
10. Deswarte Y, Blain L , Fabre J C. "Intrusion Tolerance in Distributed Computing Systems" [J]. Proc. of the International Symposium on Security and Privacy, IEEE Press, May 1991,110-121
11. Wang F Y, Gong F M , Chandramouli S et al. "SITAR: A Scalable Intrusion Tolerant Architecture" [EB/OL]. http://www.anr.mcnc.org/projects/ SITAR/SITAR-norfolk-2001.pdf,2001
12. Zhang Y D, Jiang B, Wang J D. "Design of Network Forensic System Based on Intrusion Tolerance". Computer Engineering, 2007, vol 33, No. 19, 161-163