Response initiation in distributed intrusion response systems for tactical MANETs

Proceedings - European Conference on Computer Network Defense, EC2ND 2010

Volumn , Issue , 2010, Pages 55-62

  Klein, Gabriel ^a   Rogge, Henning ^a   Schneider, Felix ^a   Toelle, Jens ^a   Jahnke, Marko ^a   Karsch, Stefan ^b  

^a FRAUNHOFER FKIE   (Germany)

^b Gummersbach Campus   (Germany)

Author keywords

Intrusion response; IRMEF; IRS architecture; Security; Tactical MANET

Indexed keywords

INTRUSION RESPONSE; IRMEF; IRS ARCHITECTURE; SECURITY; TACTICAL MANET;

COMPUTER CRIME; INTERNET; INTRUSION DETECTION; MILITARY ELECTRONIC COUNTERMEASURES; MOBILE AD HOC NETWORKS; NETWORK ARCHITECTURE;

AD HOC NETWORKS;

EID: 78650877533     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/EC2ND.2010.11     Document Type: Conference Paper

References (16)

1. M. Jahnke, G. Klein, A. Wenzel, N. Aschenbruck, E. Gerhards-Padilla, P. Ebinger, S. Karsch, and J. Haag, "MITE - MANET Intrusion Detection for Tactical Environments," in Proc. of the NATO/RTO IST-076 Research Symposium on Information Assurance for Emerging and Future Military Systems, Ljubljana, Slovenia, 2008.
2. A. Clemm, Network Management Fundamentals. Cisco Press, Nov. 2006.
3. D. Durham, J. Boyle, R. Cohen, S. Herzog, R. Rajan, and A. Sastry, "The COPS (Common Open Policy Service) Protocol," RFC 2748 (Proposed Standard), Jan. 2000, updated by RFC 4261. [Online]. Available: http://www.ietf.org/rfc/rfc2748.txt
4. W. Song, S. Rehman, and H. Lutfiyya, "A scalable PBNM framework for MANET management," in IM'09: Proceedings of the 11th IFIP/IEEE international conference on Symposium on Integrated Network Management. Piscataway, NJ, USA: IEEE Press, 2009, pp. 234-241.
5. A. Hadjiantonis, A. Malatras, and G. Pavlou, "A context-aware, policy-based framework for the management of MANETs," in POLICY '06: Proceedings of the Seventh IEEE International Workshop on Policies for Distributed Systems and Networks. Washington, DC, USA: IEEE Computer Society, 2006, pp. 23-34.
6. S. Boros, "Policy-based network management with SNMP," in Proc. of EUNICE, University of Twente, Twente, Netherlands, 2000.
7. M. Jahnke, J. Tölle, S. Lettgen, M. Bussmann, and U. Weddige, "A Robust SNMP based Infrastructure for Intrusion Detection and Response in Tactical MANETs," in Proceedings of the GI SIG SIDAR Workshop on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA 2006), ser. LNCS, R. Büschkes and P. Laskov, Eds., vol. 4064. Berlin, Germany: Springer-Verlag, Heidelberg, Jul. 2006, pp. 164-180.
8. H. Debar, D. Curry, and B. Feinstein, "The Intrusion Detection Message Exchange Format (IDMEF)," RFC 4765 (Experimental), Mar. 2007. [Online]. Available: http://www.ietf.org/rfc/rfc4765.txt
9. R. Danyliw, J. Meijer, and Y. Demchenko, "The Incident Object Description Exchange Format," RFC 5070 (Proposed Standard), Dec. 2007. [Online]. Available: http://www.ietf.org/rfc/rfc5070.txt
10. B. Feinstein and G. Matthews, "The Intrusion Detection Exchange Protocol (IDXP)," RFC 4767 (Experimental), Mar. 2007. [Online]. Available: http://www.ietf.org/rfc/rfc4767.txt
11. M. Rose, "The Blocks Extensible Exchange Protocol Core," RFC 3080 (Proposed Standard), Mar. 2001. [Online]. Available: http://www.ietf.org/ rfc/rfc3080.txt
12. J. Case, M. Fedor, M. Schoffstall, and J. Davin, "Simple Network Management Protocol (SNMP)," RFC 1157 (Historic), May 1990. [Online]. Available: http://www.ietf.org/rfc/rfc1157.txt
13. U. Blumenthal and B. Wijnen, "User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)," RFC 3414 (Standard), Dec. 2002. [Online]. Available: http://www.ietf.org/rfc/rfc3414.txt
14. T. Aurisch, T. Ginzler, and P. Martini, "Practical efficiency analysis of a dual mode group key management," in Proceedings of the 2008 Military Communications Conference (MILCOM). IEEE, 2008.
15. H. Rogge, G. Klein, A. Wenzel, and M. Jahnke, "Improvement of IP-based MANET emulation," in Proceedings of the 2009 Military Communications and Information Systems Conference (MCC), Prague, Czech Republic, 2009.
16. M. Jahnke, "Graph-based automated denial-of-service attack response," PhD Dissertation, Rheinische Friedrich-Wilhelms-Universität Bonn, Bonn, Germany, 2009.