An extensible and virtualization-compatible IDS management architecture

5th International Conference on Information Assurance and Security, IAS 2009

Volumn 2, Issue , 2009, Pages 130-134

  Roschke, Sebastian ^a   Cheng, Feng ^a   Meinel, Christoph ^a  

^a UNIVERSITY OF POTSDAM   (Germany)

Author keywords

IDMEF; Ids; IDS management; Virtualization; VM

Indexed keywords

COUPLED ENVIRONMENT; DISTRIBUTED IDS; FAST RECOVERY; IDS; INTRUSION DETECTION SYSTEMS; MANAGEMENT ARCHITECTURES; MANAGEMENT SYSTEMS; NEW DESIGN; PLUG-INS; VIRTUAL MACHINES; VIRTUALIZATIONS;

COMPUTER CRIME; INTERACTIVE COMPUTER SYSTEMS; INTRUSION DETECTION; NETWORK SECURITY;

MANAGEMENT;

EID: 74049138988     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IAS.2009.151     Document Type: Conference Paper

References (17)

1. F-Secure Linux Security: http://www.f-secure.com/linux-weblog/. F-Secure Corporation (2006-2009)
2. Samhain IDS: http://www.la-samhna.de/samhain/ (2001-2009)
3. Snort IDS: http://www.snort.org/ (1998-2009)
4. Laureano, M., Maziero, C., Jamhour, E.: Protecting host-based intrusion detectors through virtual machines. Computer Networks 51(5), (2007) pp. 1275-1283
5. Prelude IDS: http://www.prelude-ids.com/. PreludeIDS Technologies (2005-2009)
6. Debar, H., Curry, D., Feinstein, B.: The Intrusion Detection Message Exchange Format, Internet Draft. Technical Report, IETF Intrusion Detection Exchange Format Working Group (July 2004)
7. Derrick, E.J., Tibbs, R.W., Reynolds, L.L.: Investigating new approaches to data collection, management and analysis for network intrusion detection. In: Proceedings of the 45th Annual Southeast Regional Conference, (SE'07), New York, USA (2007) pp. 283-287
8. Zhou, C.V., Karunasekera, S., Leckie, C.: Evaluation of a decentralized architecture for large scale collaborative intrusion detection. In: Proceedings of the 10th IFIP/IEEE International Symposium on Integrated Network Management, IM 2007, Munich, Germany, (2007) pp. 80-89
9. Claudino, E.C., Abdelouahab, Z., Teixeira, M.M.: Management and integration of information in intrusion detection system: Data integration system for ids based multi-agent systems. In: Proceedings of the 2006 IEEE/WIC/ACM international conference on Web Intelligence and Intelligent Agent Technology, WI-IATW 2006, Washington, DC, USA (2006) pp. 49-52
10. Yu, J., Reddy, Y.V.R., Selliah, S., and et al.: TRINETR: An intrusion detection alert management system. In: Proceedings of the 13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE'04), Washington, DC, USA (2004) pp. 235-240
11. Nagios: http://www.nagios.org/.
12. Laureano, M., Maziero, C., Jamhour, E.: Intrusion detection in virtual machine environments. In: EUROMICRO (2004) pp. 520-525
13. Moore, D., Shannon, C., Brown, D.J., and et al.: Inferring internet denial-of-service activity. ACM Transactions on Computer Systems (TOCS) 24(2) (2006) pp. 115-139
14. The Anti-Virus or Anti-Malware Test File: http://www.eicar.org/, European Institute for Computer Antivirus Research (EICAR) (2008)
15. Xen Project: http://www.xen.org/.
16. Java Architecture for XML Binding (JAXB): http://java.sun.com/ developer/. Sun Developer Network (SDN) (2003)
17. Cheng, F., Roschke, S., Meinel, Ch.: Implementing IDS Management on Lock-Keeper In: Proceedings of 5th Information Security Practice and Experience Conference (ISPEC'09), Springer LNCS 5451, Xi'an, China (April 2009) pp. 360-371