Towards a framework to detect multi-stage advanced persistent threats attacks

Proceedings - IEEE 8th International Symposium on Service Oriented System Engineering, SOSE 2014

Volumn , Issue , 2014, Pages 390-395

  Bhatt, Parth ^a   Yano, Edgar Toshiro ^a   Gustavsson, Per ^b  

^a INSTITUTO TECNOLÓGICO DE AERONÁUTICA   (Brazil)

^b GEORGE MASON UNIVERSITY   (United States)

Author keywords

APT; Hadoop; Intrusion Kill Chain; Multi stage Attack

Indexed keywords

CHAINS; COMPUTER CRIME; COMPUTER SOFTWARE; SYSTEMS ENGINEERING;

APT; ATTACK METHODS; DESIGN PRINCIPLES; HADOOP; KILL CHAIN; LOGIC LAYERS; MODELING BEHAVIOR; MULTI-STAGE ATTACK;

MALWARE;

EID: 84903640855     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SOSE.2014.53     Document Type: Conference Paper

References (15)

1. Li F, Atlasis A, " A Detailed Analysis of an Advanced Persistent Threat Malware", 2011, SANS Institute InfoSec Reading Room
2. Sood A.K., Enbody R.J. " Targeted cyber attacks: A Superset of advanced persistent threats" Security & Privacy, IEEE Volume 11, Issue 1 2013
3. Hutchins Eric M., Cloppert Michael J., Amin Rohan M, "Intelligence- Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains" ICIW2011
4. Brad Hale, "Estimating Log Generation for Security Information Event and Log Management", http://content.solarwinds.com/creative/pdf/ Whitepapers/estimating-log-generation-white-paper.pdf[accessed 1 Jan 2014]
5. Tom White "Hadoop: The Definitive Guide", 2009, 978-0-596-52197-4
6. Kruegel, Christopher, Valeur, Fredrik and Vigna, Giovanni. Intrusion Detection and Correlation - Challenges and Solutions. Vol. 14. : Springer, 2005.
7. HDFS Architecture Guide http://hadoop.apache.org/docs/stable1/hdfs- design.html [accessed 1 Jan 2014]
8. CAPEC -Common Attack Pattern Enumeration and Classification online Mechanism of Attack at http://capec.mitre.org/data/definitions/1000.html [accessed 1 Jan 2014]
9. Dr. Dirk Ourston, Ms. Sara Matzner, Mr. William Stump, and Dr. Bryan Hopkins, Applied Research Laboratories University of Texas at Austin Applications of Hidden Markov Models to Detecting Multi-stage Network Attacks, Proceedings of the 36th Hawaii International Conference on System Sciences, 2003.
10. MacDonald, Neil, 2012, Information Security is Becoming a Big Data Analytic Problem, Gartner, (23 March 2012), DOI= http://www.gartner.com/id= 1960615
11. J. Howes, J. Solderitsch, I. Chen & J. Craighead, "Enabling trustworthy spaces via orchestrated analytical security", ACM, CSIIRW 2013, Article No. 13
12. J. Therdphapiyanak, K. Piromsopa, "Applying Hadoop for log analysis toward distributed IDS" ACM ICUIMC 2013, Article No. 3
13. Vries, J.D. and Hoogstraaten H. and Berg, J.V.D. and Daskapan S, "Systems for Detecting Advanced Persistent Threats CyberSecurity" 54- 61, IEEE Computer Society 2012
14. Apache Sqoop http://sqoop.apache.org/[accessed 1 Jan 2014]
15. Hay Daniel Cid, R. B. A. OSSEC Host Based Intrusion Detection Guide. [S.l.]: Syngress Publishing, Inc., 2008.