Better logging through formality applying formal specification techniques to improve audit logs and log consumers

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 1907, Issue , 2000, Pages 1-16

  Flack, Chapman ^a   Atallah, Mikhail J ^a  

^a PURDUE UNIVERSITY   (United States)

Author keywords

BSM; CIDF; Documentation; Formal; Grammar; Interoperability; Log; Reliability; Specification

Indexed keywords

INTEROPERABILITY; INTRUSION DETECTION; REFINING; RELIABILITY; SEMANTICS; SPECIFICATIONS; SYSTEM PROGRAM DOCUMENTATION;

CIDF; COMMERCIAL FORMATS; FORMAL; FORMAL SPECIFICATION TECHNIQUES; GRAMMAR; ITS APPLICATIONS; ROBUSTNESS ISSUES; SEMANTIC ACCURACY;

FORMAL SPECIFICATION;

EID: 79953123891     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-39945-3_1     Document Type: Conference Paper

References (14)

1. Matt Bishop. A standard audit trail format. In Proceedings of the 1995 National Information Systems Security Conference, pages 136–145, Baltimore, Maryland, October 1995. 7
2. Mark Crosbie, Bryn Dole, Todd Ellis, Ivan Krsul, and Eugene Spafford. IDIOT users guide. Technical Report TR-96-050, Purdue University, September 1996. 4
3. J. Gosling, B. Joy, and G. Steele. The Java Language Specification. Addison-Wesley, 1996. 2, 8
4. John E. Hopcroft and Jeffrey D. Ullman. Introduction to Automata Theory, Languages, and Computation. Addison-Wesley, 1979. 3
5. Koral Ilgun. USTAT: A Real-Time Intrusion Detection System for UNIX. MS thesis, University ofCalif ornia, Santa Barbara, November 1992. 4, 5, 7
6. SRI International. EMERALD website. http://www.sdl.sri.com/emerald/, April 2000. 7
7. UlfLin dqvist and Phillip A. Porras. Detecting computer and network misuse through the production-based expert system toolset (P-BEST). In Proceedings of the 1999 IEEE Symposium on Security and Privacy, Oakland, California, October 1999. 8
8. Sun Microsystems. SunSHIELD Basic Security Module Guide. Sun Microsystems, 901 San Antonio Road, Palo Alto, California, Solaris 2.6 edition, 1997. Part Number 802-5757-10. 2, 4, 10, 12, 13, 14
9. P. Mockapetris. Domain names – concepts and facilities. STD 13, ISI, November 1987. 7
10. Abdelaziz Mounji. Languages and Tools for Rule-Based Distributed Intrusion Detection. D.Sc. thesis, Universitaires Notre-Dame de la Paix Namur (Belgium), September 1997. 4
11. Terence Parr. ANTLR website. http://www.antlr.org/, February 2000. 2, 3
12. Terence John Parr. Obtaining Practical Variants of LL(k) and LR(k) for k > 1 by Splitting the Atomic k-tuple. PhD thesis, Purdue University, August 1993. 9
13. Manfred Ruschitzka. Two-level grammars for data conversions. Future Generation Computer Systems, pages 373–380, 1990. 15
14. Brian Tung. Common intrusion detection framework. http://www.gidos.org/, November 1999. 2