Formal parameterization of log synchronization events within a distributed forensic compute cloud database environment

Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering

Volumn 88 LNICST, Issue , 2012, Pages 156-171

  Thorpe, Sean ^a   Ray, Indrakshi ^b   Ray, Indrajit ^b   Grandison, Tyrone ^c   Barbir, Abbie ^d   France, Robert ^b  

^a UNIVERSITY OF TECHNOLOGY   (Jamaica)

^b University Services Building   (United States)

^c IBM RESEARCH   (United States)

^d Bank of America ^*  (United States)

Author keywords

Cloud; event; Forensic; log; parameterized

Indexed keywords

AUTOMATED DETECTION; AUTOMATED METHODS; COMPOSITE EVENT; COMPUTE CLOUDS; DIGITAL EVENTS; DIGITAL INVESTIGATORS; ELECTRONIC SYSTEMS; EVENT; EVENT-CONDITION-ACTION PARADIGMS; FORENSIC; FORENSIC INVESTIGATION; INTERNETWORKING; LOG; MULTIPLE COMPUTERS; NUMBER OF SOURCES; PARAMETERIZED; VIRTUAL MACHINES; VIRTUAL NETWORKS; VIRTUAL SERVERS;

CLOUDS; COMPUTER FORENSICS; CRIME; ELECTRONIC CRIME COUNTERMEASURES; PARAMETERIZATION; PERSONAL COMPUTERS; SERVERS; SYNCHRONIZATION;

COMPUTER CRIME;

EID: 84873957734     PISSN: 18678211     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-35515-8_13     Document Type: Conference Paper

References (19)

1. Borgida, A., Bracham, R.J., McGuiness, D.L., Resnick, L.A.: CLASSIC - A Structural Data Model of Objects. In: ACM SIGMOD International Conference on Management of Data, Portland, Oregon (May-June 1989)
2. Chen, H., Finin, T., Joshi, A.: An Ontology for Context Aware Pervasive Computing Environments, Adjunct. In: Proceedings of the 6th International Conference on Ubiquitous Computing, Seattle, Washington, October 12-15 (2003)
3. Chen, K., Clark, A., DeVel, O., Mohay, G.: ECF-Event Correlation for Forensics. In: 1st Australian Computer, Network and Information Forensics Conference, Perth, Western Australia, November 25 (2003)
4. Cuppens, F., Miege, A.: Alert Correlation in a Cooperative Intrusion Detection Framework. In: IEEE Symposium on Security and Privacy, Berkley, California, May 12-15 (2002)
5. Doyle, J., Kohane, I., Long, W., Shrobe, H., Szolovits, P.: Event Recognition Beyond Signature and Anomaly. In: IEEE Workshop on Information Assurance and Security, June 5-6. United States Military Academy, West Point (2001)
6. Chakravarthy, S., Krishnaprasad, V., Anwar, E., Kim, S.K.: Composite Events for Active Databases: Semantics, Contexts and Detection. In: The Proceedings of the 20th International Conference on very Large Databases, Santiago de Chile, pp. 606-617 (September 1994)
7. Grandison, T., Maxmillen, M., Thorpe, S., Alba, A.: Formal definition towards Cloud Computing. Proceedings of IEEE Services (2010)
8. Adaikkalavan, R., Chakravarthy, S.: Formalization and Detection of Events Using Interval Based Semantics. In: Proceedings of the 11th International Conference on Management of Data, Goa, India, pp. 58-69 (January 2005)
9. Adaikkalavan, R., Chakravarthy, S.: SnoopIB: Interval based Event Specification and Detection for Active Databases. Data and Knowledge Engineering 59(1), 139-165 (2006)
10. Chakravarthy, S., Krishnaprasad, V., Anwar, E., Kim, S.K.: Composite Events for Active Databases: Semantics, Contexts and Detection. In: Proceedings of the 20th International Conference on Very Large Databases, Santiago de Chile, Chile, pp. 606-617 (September 1994)
11. Chakravarthy, S., Mishra, D.: Snoop: An Expressive Event Specification language for Active Databases. Data and Knowledge Engineering 14(1), 1-26 (1994)
12. Gatziu, S., Dittrich, K.R.: Detecting Composite Events in Active Database Systems Using PetriNets. In: Proceedings of the 4th International Workshop on Research Issues in Data Engineering: Active Database Systems, Houston, TX, pp. 2-9 (February 1994)
13. Gehani, N., Jagadish, H.V., Shmueli, O.: Event Specification in an Active Object Oriented Database. In: Proceedings of the ACM SIGMOD International Conference on Management of Data, pp. 81-90. ACM Press, San Diego (1992)
14. Thorpe, S., Ray, I.: Compute Cloud Forensic Framework (unpublished)
15. Zimmer, D., Unland, R.: On the Semantics of Complex Events in Active Database Management Systems. In: Proceedings of the 15th International Conference on Data Engineering, pp. 392-399. IEEE Computer Society Press, Sydney (1999)
16. Ray, I., Huang, W.: Event Detection in Multi level Secure Databases. In: Proceedings of the 1st International Conference on Secure Systems, Kolkata, India (December 2005)
17. Thorpe, S., Farquharson, K.: Design of an enterprise VM log auditor tool kit. In: Proceedings of the 1st International Forensic Conference and Journal of Arts and Technology. University of Technology, Kingston (2011)
18. Thorpe, S., Ray, I., Ray, I., Grandison, T., Barbir, A.: Global Virtual Machine Auditor for a Federated Digital Identity. Proceedings of the Journal of Information Assurance and Security 6(4), 322-330 (2011)
19. Ray, I., Huang, W.: Increasing Expressiveness of Composite Events Using Parameter Contexts. In: Atzeni, P., Caplinskas, A., Jaakkola, H. (eds.) ADBIS 2008. LNCS, vol. 5207, pp. 215-230. Springer, Heidelberg (2008)