Federated access to cyber observables for detection of targeted attacks

Proceedings - IEEE Military Communications Conference MILCOM

Volumn , Issue , 2014, Pages 60-66

  Atighetchi, Michael ^a   Griffith, John ^a   Emmons, Ian ^a   Mankins, David ^a   Guidorizzi, Richard ^b  

^a BBN TECHNOLOGIES   (United States)

^b DEFENSE ADVANCED RESEARCH PROJECTS AGENCY   (United States)

Author keywords

cyber security; federated data access; middleware; ontology; Semantic Web

Indexed keywords

CRIME; INFORMATION MANAGEMENT; INTERNET PROTOCOLS; MIDDLEWARE; MILITARY COMMUNICATIONS; NETWORK SECURITY; ONTOLOGY; SEMANTIC WEB;

CYBER INFORMATION; CYBER SECURITY; DATA ACCESS; ENTERPRISE NETWORKS; MULTIPLE DEVICES; NETWORKED DEVICES; ONE-DIMENSIONAL FEATURES; STATE-OF-THE-ART APPROACH;

COMPUTER CRIME;

EID: 84912524617     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MILCOM.2014.15     Document Type: Conference Paper

References (28)

1. DARPA, "Integrated Cyber Analysis System (ICAS) Homepage," 2014. Available: http://www. darpa. mil/Our-Work/I2O/Programs/Integrated-Cyber-Anal ysis-System-%28ICAS%29. aspx.
2. M. Fisher and M. Dean, "Semantic Query: Solving the Needs of a Net-Centric Data Sharing. " Semantic Technology Conference, 23-May-2007.
3. D. L. McGuinness, F. Van Harmelen, and others, "OWL web ontology language overview," W3C Recomm., vol. 10, no. 2004-03, p. 10, 2004.
4. D. Miller and B. Pearson, Security information and event management (SIEM) implementation. McGraw-Hill, 2011.
5. W. Stallings, SNMP, SNMPv2, SNMPv3, and RMON 1 and 2. Addison-Wesley Longman Publishing Co., Inc., 1998.
6. DMTF, "Web Services for Management (WS-MAN) Specification," DSP0226, 2010.
7. J. Pérez, M. Arenas, and C. Gutierrez, "Semantics and Complexity of SPARQL," in The Semantic Web-ISWC 2006, Springer, 2006.
8. M. I. Center, "APT1: Exposing one of China's cyber espionage units," Mandiant, Tech. Rep, 2013.
9. Cisco, "Cisco Unified IP Phone Local Kernel System Call Input Validation Vulnerability," Cisco Security Advisory Advisory ID: cisco-sa-20130109-uipphone, Mar. 2013.
10. D. Raman, B. De Sutter, B. Coppens, S. Volckaert, K. De Bosschere, P. Danhieux, and E. Van Buggenhout, "DNS tunneling for network penetration," in Information Security and Cryptology-ICISC 2012, Springer, 2013, pp. 65-77.
11. E. Vyncke and C. Paggen, LAN Switch Security. Cisco Press, 2008.
12. A. P. Sheth and J. A. Larson, "Federated database systems for managing distributed, heterogeneous, and autonomous databases," ACM Comput. Surv. CSUR, vol. 22, no. 3, pp. 183-236, 1990.
13. D. Kolas, "Query Rewriting for Semantic Web Information Integration," in Proceedings of the Sixth International Workshop on Information Integration on the Web (IIWeb-07), Vancouver, Canada, 2007.
14. M. Fisher, M. Dean, and G. Joiner, "Use of OWL and SWRL for Semantic Relational Database Translation," in Proceedings of the Fourth OWLED Workshop on OWL: Experiences and Directions, Washington, DC, 2008.
15. "Revelytix Homepage. " [Online]. Available: http://www. revelytix. com.
16. C. Bizer and R. Cyganiak, "D2rq-lessons learned," in W3C Workshop on RDF Access to Relational Databases, 2007, p. 35.
17. D. Kolas and T. Self, "Towards an Effective Methodology for Rapidly Developing Component-Based Domain Ontologies," in Proceedings of the 2009 International Conference on Ontologies for the Intelligence Community, Fairfax, VA, 2009.
18. "OWL Time Ontology. " [Online]. Available: http://www. w3. org/TR/owl-time.
19. "Basic Formal Ontology (BFO) Homepage. " [Online]. Available: http://www. ifomis. org/bfo.
20. DISA, "The Host Based Security System," 2012. [Online]. Available: http://www. disa. mil/Services/Information-Assurance/HBS/HBSS.
21. S. Zanikolas and R. Sakellariou, "A taxonomy of grid monitoring systems," Future Gener. Comput. Syst., vol. 21, no. 1, pp. 163-188, 2005.
22. M. L. Massie, B. N. Chun, and D. E. Culler, "The ganglia distributed monitoring system: design, implementation, and experience," Parallel Comput., vol. 30, no. 7, pp. 817-840, 2004.
23. W. Barth, Nagios: System-und Netzwerk-Monitoring. No Starch Press, 2008.
24. R. Olups, Zabbix 1. 8 network monitoring. Packt Publishing, 2010.
25. J. Stearley, S. Corwell, and K. Lord, "Bridging the gaps: joining information sources with Splunk," in Proceedings of the Workshop on Managing systems via log analysis and machine learning techniques, 2010.
26. Splunk. com, "Splunk for Security-Supporting a Big Data Approach for Security Intelligence," 2014.
27. M. Atighetchi, N. Soule, P. Pal, J. Loyall, A. Sinclair, and R. Grant, "Safe configuration of TLS connections," in Communications and Network Security (CNS), 2013 IEEE Conference on, 2013, pp. 415-422.
28. I. Horrocks, P. F. Patel-Schneider, H. Boley, S. Tabet, B. Grosof, M. Dean, and others, "SWRL: A semantic web rule language combining OWL and RuleML," W3C Memb. Submiss., vol. 21, p. 79, 2004.