Managing alerts in a multi-intrusion detection environment

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2001-January, Issue , 2001, Pages 22-31

  Cuppens, Frédéric ^a  

^a ONERA   (France)

Author keywords

Bayesian methods; Electrical capacitance tomography; Environmental management; Face detection; Forensics; Intrusion detection; Merging; Network servers; Proposals; Real time systems

Indexed keywords

BAYESIAN NETWORKS; ELECTRIC IMPEDANCE TOMOGRAPHY; ENVIRONMENTAL MANAGEMENT; FACE RECOGNITION; INTERACTIVE COMPUTER SYSTEMS; MERCURY (METAL); MERGING; REAL TIME SYSTEMS; SECURITY OF DATA; SECURITY SYSTEMS;

BAYESIAN METHODS; ELECTRICAL CAPACITANCE TOMOGRAPHY; FORENSICS; NETWORK SERVER; PROPOSALS;

INTRUSION DETECTION;

EID: 84922794799     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2001.991518     Document Type: Conference Paper

References (22)

1. R. Bace. Intrusion Detection. McMillan Technical Publishing, 2000
2. J. Carrère, F. Cuppens, M.-H. Huang and C. Saurel. Insider Detection: Using Confidentiality Security Policies for Information Flow Analysis. In preparation
3. Computer Associates. E-Trust Intrusion Detection. 2000
4. D. Curry and H. Debar. Intrusion Detection Message Exchange Format Data Model and Extensible Markup Language (XML) Document Type Definition. draft-itetf-idwg-idmef-xml-03.txt, February 2001
5. F. Cuppens and R. Ortalo. LAMBDA: A Language to Model a Database for Detection of Attacks. Third Workshop on the Recent Advances in Intrusion Detection (RAID'2000), Toulouse, France, October 2000
6. F. Cuppens. Cooperative Intrusion Detection. International Symposium Information Superiority: Tools for Crisis &Conflict-Management. Paris, France, September, 2001
7. M. Diaz. GNU Prolog: A Native Prolog Compiler with Constraint Solving over Finite Domains. Edition 1.4 for GNU Prolog version 1.2.1. http://gnu-prolog.inria.fr/manual/. July, 2000
8. H. Debar and A. Wespi. The Intrusion-Detection Console Correlation Mechanism. Fourth Workshop on the Recent Advances in Intrusion Detection (RAID'2001), Davis, USA, October 2001
9. M.-Y. Huang. A Large-scale Distributed Intrusion Detection Framework Based on Attack Strategy Analysis. First International Workshop on the Recent Advances in Intrusion Detection (RAID'98), Louvain-La-Neuve, Belgium, 1998
10. J. Kleinwaechter. The Limitations of Intrusion Detection on High Speed Networks. First International Workshop on the Recent Advances in Intrusion Detection (RAID'98), Louvain-La-Neuve, Belgium, 1998
11. W. Lee. Combining Knowledge Discovery and Knowledge Engineering to Build IDSs. Second International Workshop on the Recent Advances in Intrusion Detection (RAID'99), Purdue, USA, October 1999
12. R. Lippmann. Using Key String and Neural Networks to Reduce False Alarms and Detect New Attacks with Sniffer-Based Intrusion Detection Systems. Second International Workshop on the Recent Advances in Intrusion Detection (RAID'99), Purdue, USA, October 1999
13. T. Lunt. IDES: An Intelligent System for Detecting Intruders. Computer Security, Threats and Countermeasures, November 1990
14. A. Mounji and B. Le Charlier. Continuous Assessment of a Unix Configuration: Integrating Intrusion Detection and Configuration Analysis. ISOC'97 Symposium on Network and Distributed System Security, San Diego, USA, February 1997
15. D. Mann and S. Christey. Towards a Common Enumeration of Vulnerabilities. 2nd Workshop on Research with Security Vulnerability Databases, Purdue University, West Lafayette, Indiana, January, 1999
16. L. Mé, Z. Marrakchi, C. Michel, H. Debar and F. Cuppens. La détection d'intrusions : les outils doivent coopérer. To appear in the REE Journal
17. P. Porras and P. Neumann. Emerald: Event Monitoring Enabling Responses to Anomalous Live Disturbances. National Security Conference, 1997
18. M. Roesch. Snort-Lightweight Intrusion Detection for Networks. USENIX LISA'99, November 1999
19. A. Valdes and D. Anderson. Statistical Methods for Computer Usage Anomaly Detection. Third International Workshop on Rough Sets and Soft Computing, San Jose, USA, 1995
20. A. Valdes and K. Skinner. Adaptive, Model-Based Monitoring for Cyber Attack Detection. Third International Workshop on the Recent Advances in Intrusion Detection (RAID'2000), Toulouse, France, October 2000
21. A. Valdes and K. Skinner. Probabilistic Alert Correlation. Fourth International Workshop on the Recent Advances in Intrusion Detection (RAID'2001), Davis, USA, October 2001
22. D. Zerkle. A Data-Mining Analysis of RTID. Second International Workshop on the Recent Advances in Intrusion Detection (RAID'99), Purdue, USA, October 1999