A structural framework for modeling multi-stage network attacks

Proceedings of the International Conference on Parallel Processing Workshops

Volumn , Issue , 2002, Pages 5-10

  Daley, Kristopher ^a   Larson, Ryan ^a   Dawkins, Jerald ^a  

^a UNIVERSITY OF TULSA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPLEX NETWORKS; FORESTRY; INTRUSION DETECTION; TREES (MATHEMATICS);

CONTEXT SENSITIVE; MULTI-STAGE ATTACK; NETWORK VULNERABILITY; PROTECT INFORMATION; STATE OF THE ART; STRATEGIC MODELS; STRUCTURAL FRAMEWORKS; SYSTEM ADMINISTRATORS;

COMPUTER CRIME;

EID: 84860434875     PISSN: 15302016     EISSN: None     Source Type: Journal    
DOI: 10.1109/ICPPW.2002.1039705     Document Type: Article

References (16)

1. T. Aslam et al. Use of a taxonomy of security faults. In Proceedings of the Nineteenth NIST-NCSC National Information Systems Security Conference, pages 551-560, 1996.
2. J. Dawkins et al. Modeling network attacks: Extending the attack tree paradigm. In Proceedings of Third Annual International Systems Security Engineering Association Conference, Orlando, Florida, 2002.
3. J. Howard. An Analysis of Security Incidents on the Internet, 1989-1995. PhD thesis, Department of Engineering and Public Policy, Carnegie Mellon University, Pittsburgh, Pennsylvania, 1997.
4. K. Jensen. A brief introduction to coloured petri nets. In Proceeding of the TACAS'97 Workshop, pages 203-208, Enschede, The Netherlands, 1997.
5. S. Kumar. Classification and Detection of Computer Intrusions. PhD thesis, Department of Computer Science, Purdue University, West Lafayette, Indiana, 1995.
6. S. Kumar and E. Spafford. A pattern-matching model for misuse intrusion detection. In Proceedings of the 17th National Computer Security Conference, volume 99, pages 11-21, Baltimore, MD, 1994.
7. R. Lackey. Penetration of computer systems: An overview. Honeywell Computing Journal, 8(2):81-85, 1974.
8. C. Landwehr. A taxonomy of computer program security flaws. ACM Computing Surveys, 26(3):211-254, 1994.
9. U. Lindqvist and E. Jonsson. How to systematically classify computer security. In Proceedings of the IEEE Symposium on Security and Privacy, pages 154-163, 1997.
10. A. Moore et al. Attack modeling for information security and survivability. Survivability Systems Unlimited, 2001.
11. Motorola Intrusion Vision, MIV. Scottsdale, Arizona, 2001. http://www.generaldynamic.com.
12. Ringneck Security Console, "RSC". Reston, Virgina, 2001. http://www.ringnecktech.net.
13. B. Schneier. Secrets and Lies. John Wiley and Sons, New York, 2000.
14. S. Templeton and K. Levitt. A requires/provides model for computer attacks. In Proceedings of the New Security Paradigms Workshop 2000, pages 132-141, Oakland, California, 2000.
15. T. Tidwell et al. Modeling internet attacks. In Proceedings of the 2001 IEEE Workshop on Information Assurance and Security, pages 54-59, United States Military Academy, West Point, New York, 2001.
16. T. Wicks and M. Haung. A large-scale distributed intrusion detection framework based on attack strategy analysis. In Applied Research and Technology, The Boeing Company, Seattle, WA U.S.A, 1998.