Intrusion correlation using ontologies and multi-agent systems

Communications in Computer and Information Science

Volumn 76 CCIS, Issue , 2010, Pages 51-63

  Isaza, Gustavo ^a   Castillo, Andrés ^b   López, Marcelo ^a   Castillo, Luis ^c   López, Manuel ^a  

^a UNIVERSIDAD DE CALDAS   (Colombia)

^b UNIVERSIDAD PONTIFICIA DE SALAMANCA   (Spain)

^c UNIVERSIDAD NACIONAL DE COLOMBIA   (Colombia)

Author keywords

Alert Correlation; Intrusion Detection; Intrusion Prevention; Ontology; Semantic IDS

Indexed keywords

ALERT CORRELATION; ALERTS CORRELATION; INTRUSION PREVENTION; ONTOLOGY MODEL; SECURITY TOOLS; SEMANTIC MODEL; SEMANTIC OPERATION;

CORRELATION METHODS; MULTI AGENT SYSTEMS; NETWORK SECURITY; ONTOLOGY; PATTERN RECOGNITION SYSTEMS;

INTRUSION DETECTION;

EID: 77957952010     PISSN: 18650929     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-13365-7_6     Document Type: Conference Paper

References (23)

1. Al-Mamory, S., Zhang, H.: Intrusion detection alarms reduction using root cause analysis and clustering, pp. 419-430. Butterworth-Heinemann, Butterworths (2009)
2. Undercoffer, J., Finin, T., Joshi, A., Pinkston, J.: A target centric ontology for intrusion detection: using DAML+OIL to classify intrusive behaviors. Knowledge Engineering Review - Special Issue on Ontologies for Distributed Systems, 2-22 (2005)
3. Mandujano, S., Galvan, A., Nolazco, J.: An ontology-based multiagent approach to outbound intrusion detection. In: The 3rd ACS/IEEE International Conference on Computer Systems and Applications, p. 94 (2005)
4. Denker, G., Kagal, L., Finin, T., Paolucci, M., et al.: Security for DAML Web Services: Annotation and Matchmaking. In: Fensel, D., Sycara, K., Mylopoulos, J. (eds.) ISWC 2003. LNCS, vol. 2870, pp. 335-350. Springer, Heidelberg (2003)
5. Raskin, V., Hempelmann, C.C.F., Triezenberg, K., Nirenburg, A.: Ontology in Information Security: A Useful Theoretical Foundation and Methodological Tool. In: Proceedings of the 2001 Workshop on New Security Paradigms (NSPW 2001), pp. 53-59 (2001)
6. Cuppens-Boulahia, N., Cuppens, F., Lopez de Vergara, J.E., Vazquez, E., et al.: An ontology-based approach to react to network attacks. In: Third International Conference on Risks and Security of Internet and Systems, CRiSIS 2008, pp. 27-35 (2008) (on Publication)
7. Goldman, R., Harp, S.: Model-based Intrusion Assessment in Common Lisp. In: International Lisp Conference, 2009. Association of Lisp Users and ACM SIGPLAN, Cambridge (2009)
8. Balasubramaniyan, J., Garcia-Fernandez, J., Spafford, E., Zamboni, D.: An Architecture for Intrusion Detection using Autonomous Agents. Department of Computer Sciences. Purdue University, West Lafayette (1998)
9. Krmicek, V., Celeda, P., Rehak, M., Pechoucek, M.: Agent-Based Network Intrusion Detection System. In: Proceedings of the 2007 IEEE/WIC/ACM International Conference on Intelligent Agent Technology. IEEE Computer Society, Los Alamitos (2007)
10. Orfila, A., Carbo, J., Ribagorda, A.: Autonomous decision on intrusion detection with trained BDI agents, pp. 1803-1813. Butterworth-Heinemann, Butterworths (2008)
11. Lips, R., El-Kadhi, N.: Intelligent Mobile Agent for Intrusion Detection System (IMAIDS), European Institute of Technology. rue Pasteur-94270, Le Kremlin-France (2008)
12. Herrero, A., Corchado, E., Pellicer, M., Abraham, A.: Hybrid Multi Agent-Neural Network Intrusion Detection with Mobile Visualization. In: Corchado, E. (ed.) Innovations in Hybrid Intelligent Systems. ASC, vol. 44, pp. 320-328. Springer, Heidelberg (2008)
13. Sandhya, P., Ajith, A., Crina, G., Johnson, T.: Modeling intrusion detection system using hybrid intelligent systems, pp. 114-132. Academic Press Ltd., London (2007)
14. Zurutuza, U., Uribeetxeberria, R., Azketa, E., Gil, G., et al.: Combined Data Mining Approach for Intrusion Detection. In: International Conference on Security and Criptography, Barcelona, Spain (2008)
15. IETF-IDMEF. he Intrusion Detection Message Exchange Format (IDMEF) (2007), http://www.ietf.org/rfc/rfc4765.txt (Consulted: Febrero 2008)
16. Corcho, O., López, M., Gómez-Pérez, A., López-Cima, A.: Building Legal Ontologies with METHONTOLOGY and WebODE. In: Benjamins, V.R., Casanovas, P., Breuker, J., Gangemi, A. (eds.) Law and the Semantic Web. LNCS (LNAI), vol. 3369, pp. 142-157. Springer, Heidelberg (2005)
17. Isaza, G., Castillo, A., Lopez, M., Castillo, L.: Towards Ontology-based intelligent model for Intrusion Detection and Prevention. In: 2nd International Workshop on Computational Intelligence in Security for Information Systems, CISIS 2009, pp. 109-116. Springer, Heidelberg (2009)
18. Baader, F., Nutt, W.: Basic description logics. In: The description logic handbook: theory, implementation, and applications, pp. 43-95. Cambridge University Press, Cambridge (2003)
19. DARPA. DARPA Intrusion Detection Evaluation, The 1999 DARPA off-line intrusion detection evaluation, LINCOLN LABORATORY Massachusetts Institute of Technology, http://www.ll.mit.edu/IST/ideval/data/1999/1999-data-index.html (Consulted 2008)
20. Vila, X., Schustera, A., Riera, A.: Security for a Multi-Agent System based on JADE. Computers and Security. Science Direct 26(5), 391-400 (2007)
21. Friedman-Hill, E., Sandia, L.: Jess, The Rule Engine for Java Platform (2009), http://www.jessrules.com/jess/docs/index.shtml (Consulted 2009)
22. Cuppens, F., Miège, A.: Alert Correlation in a Cooperative Intrusion Detection Framework. In: IEEE Symposium on Security and Privacy, Oakland, May 12-15 (2002)
23. Isaza, G., Castillo, A., Duque, N.: An Intrusion Detection and Prevention Model Based on Intelligent Multi-Agent Systems, Signatures and Reaction Rules Ontologies. In: 7th International Conference on Practical Applications of Agents and Multi-Agent Systems (PAAMS 2009). AISC, vol. 55, pp. 237-245. Springer, Heidelberg (2009)