A semantic framework for data analysis in networked systems

Proceedings of NSDI 2011: 8th USENIX Symposium on Networked Systems Design and Implementation

Volumn , Issue , 2011, Pages 127-140

  Viswanathan, Arun ^a   Hussain, Alefiya ^a,b   Mirkovic, Jelena ^a   Schwab, Stephen ^b   Wroclawski, John ^a  

^a UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

^b Sparta Inc ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ABSTRACTING; BEHAVIORAL RESEARCH; FORMAL LANGUAGES; HIGH LEVEL LANGUAGES; SEMANTIC WEB; SEMANTICS; SYSTEMS ANALYSIS;

BEHAVIOR REPRESENTATION; EFFECTIVE ANALYSIS; FUNDAMENTAL ANALYSIS; MODEL EXPERIMENTS; NETWORKED SYSTEMS; SECURITY THREATS; SEMANTIC ANALYSIS; SEMANTIC FRAMEWORK;

MODELING LANGUAGES;

EID: 84890099677     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. ALLEN, J. Maintaining Knowledge about Temporal Intervals. Communications of the ACM 26, 11 (Nov. 1983), 832-843.
2. BENZEL, T., BRADEN, R., KIM, D., NEUMAN, C., JOSEPH, A., SKLOWER, K., OSTRENGA, R., AND SCHWAB, S. Experience with DETER: A Testbed for Security Research. In 2nd Intl. Conf. on Testbeds and Research Infrastructures for the Devel. of Networks and Communities - TRIDENTCOM (2006), p. 10.
3. BÉRARD, B. Systems and Software Verification: Model-checking Techniques and Tools. Springer, 2001.
4. ELLIS, D. R., AIKEN, J. G., ATTWOOD, K. S., AND TENAGLIA, S. D. A Behavioral Approach to Worm Detection. In Proc. of the ACM workshop on Rapid malcode (2004), pp. 43-53.
5. HUSSAIN, A., HEIDEMANN, J., AND PAPADOPOULOS, C. A Framework For Classifying Denial of Service Attacks. Proc. of the Conf. on Applications, Technologies, Architectures, and Protocols for Comp. Comm. - SIGCOMM (2003), 99.
6. JAIN, N., MISHRA, S., SRINIVASAN, A., GEHRKE, J., WIDOM, J., BALAKRISHNAN, H., ÇETINTEMEL, U., CHERNIACK, M., TIBBETTS, R., AND ZDONIK, S. Towards a Streaming SQL Standard. Proc. VLDB Endow. 1 (August 2008), 1379-1390.
7. KAMINSKY, D. Multiple DNS Implementations Vulnerable to Cache Poisoning. http://www.kb.cert.org/vuls/id/800113, 2008.
8. KINDER, J., KATZENBEISSER, S., SCHALLHART, C., AND VEITH, H. Detecting Malicious Code by Model Checking. In Intrusion and Malware Detection and Vuln. Assessment, K. Julisch and C. Kruegel, Eds., vol. 3548 of Lecture Notes in Computer Science. Springer Berlin/Heidelberg, 2005, pp. 174-187.
9. LAMPORT, L. The Temporal Logic of Actions. ACM Trans. Program. Lang. Syst. 16, 3 (1994), 872-923.
10. LOO, B. T., CONDIE, T., GAROFALAKIS, M., GAY, D. E., HELLERSTEIN, J. M., MANIATIS, P., RAMAKRISHNAN, R., ROSCOE, T., AND STOICA, I. Declarative Networking: Language, Execution and Optimization. In Proc. of ACM SIGMOD (2006), pp. 97-108.
11. Metasploit Framework Website. http://www.metasploit.com/.
12. MIRKOVIC, J., SOLLINS, K., AND WROCLAWSKI, J. Managing the Health of Security Experiments. In Proc. of the conf. on Cyber Security Experimentation and Test (2008), USENIX, pp. 7:1-7:6.
13. NALDURG, P., SEN, K., AND THATI, P. A Temporal Logic Based Framework for Intrusion Detection. In Proc. of the 24th IFIP Intl. Conf. on Formal Tech. for Net. & Dist. Sys. (2004).
14. PAXSON, V. Bro: A System for Detecting Network Intruders in Real-time. Comput. Networks 31, 23-24 (1999), 2435-2463.
15. ROGER, M., AND GOUBAULT-LARRECQ, J. Log Auditing through Model-Checking. In Proc. of the 14th IEEE Computer Security Foundations Workshop (2001), pp. 220-236.
16. Splunk Website. http://www.splunk.com/.
17. Semantic Analysis Framework Website. http://thirdeye.isi.deterlab.net/.
18. VAARANDI, R. SEC - A Lightweight Event Correlation Tool. IEEE Workshop on IP Operations and Management (2002), 111-115.
19. Wireshark Website. http://www.wireshark.org/.