GlobalGuard: Creating the IETF-IDWG Intrusion Alert Protocol (IAP)

Proceedings - DARPA Information Survivability Conference and Exposition II, DISCEX 2001

Volumn 1, Issue , 2001, Pages 22-34

  Betser, J ^a   Walther, A ^a   Erlinger, M ^b   Buchheim, T ^b   Feinstein, B ^b   Matthews, G ^b   Pollock, R ^b   Levitt, K ^c  

^a AEROSPACE CORPORATION   (United States)

^b HARVEY MUDD COLLEGE   (United States)

^c UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET; INTERNET PROTOCOLS; MERCURY (METAL); MOBILE TELECOMMUNICATION SYSTEMS;

ENGINEERING PROCESS; FUTURE CHALLENGES; INTERNET ENGINEERING TASK FORCES; INTRUSION ALERTS; LARGE NETWORKS; WORKING GROUPS;

INTRUSION DETECTION;

EID: 84942618976     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2001.932189     Document Type: Conference Paper

References (25)

1. J. Betser, M. Erlinger, K. Levitt, "The GlobalGuard Project at Aerospace", DARPA IA&S Principal Investigator Meeting, Phoenix, AZ, August 1999.
2. S. Bradner, "The Internet Standards Process - Revision 3", RFC 2026, October 1996.
3. J. Clark, J. Culpepper, B. Davis, M. Erlinger, J. Betser, "Network Intrusion Detection" Aerospace / Harvey Mudd College CS Clinic report, Aerospace technical report ATR-2000(7639)-1, May 1998.
4. D. Curry and H. Debar, "Intrusion Detection Message Exchange Format Data Model and Extensible Markup Language (XML) Document Type Definition", http://www.cs.hmc.edu/clinic/projects/2000/aerospace/internet-drafts/draft-ietf-idwg-idmef-xml-03.txt (work in progress), February 2001.
5. T. Dierks, C. Allen, W. Treese, P.L. Karlton, A.O. Freier, P.C. Kocher, "The TLS Protocol Version 1.0", RFC 2246, January 1999.
6. M. Erlinger and M. Wood, "Intrusion Detection Message Exchange Requirements", http://www.cs.hmc.edu/clinic/projects/2000/aerospace/internet-drafts/draft-ietf-idwg-requirements-05.txt (work in progress), February 2001.
7. R. Feiertag, C. Kahn, P. Porras, D. Schnackenberg, S. Staniford, B. Tung, "A Common Intrusion Specification Language (CISL)", http://www.gidos.org/, June 1999.
8. B.S. Feinstein, G.A. Matthews, J.C.C. White, "The Intrusion Detection Exchange Protocol (IDXP)", http://www.cs.hmc.edu/clinic/projects/2000/aerospace/internet-drafts/draft-ietf-idwg-beep-idxp-01.txt (work in progress), February 2001.
9. R.T. Fielding, J. Gettys, J.C. Mogul, H.F. Nielson, L. Masinter, P. Leach, T. Berners-Lee, "Hypertext Transfer Protocol - HTTP/1.1", RFC 2616, June 1999.
10. R.A. Pollock, T.C. Buchheim, B.S. Feinstein, G.A. Matthews, D. Gupta "IAP: Intrusion Alert Protocol", http://www.cs.hmc.edu/clinic/projects/2000/aerospace/internet-drafts/draft-ietf-idwg-iap-04.txt (work in progress), February 2001.
11. J. Lawson, N. Field, G. Gebhart, M. Erlinger, J. Betser, D. Loomis, B. Davis, "Network Intrusion Detection via Correlation", Aerospace / Harvey Mudd College CS Clinic report, Aerospace technical report ATR-2000(7639)-2, April 1999.
12. S. Lukasik, G. Grove, D. Elliott, M. Goodman, S. Goodman, "Review of the National Information Protection Plan Version 1.0", Consortium for Research on Information Security and Policy (CRISP), Stanford University, May 1999
13. S. Lukasik, L. Greenberg, S. Goodman, "Protecting an Invaluable and Ever-Widening Infrastructure", CACM, Vol. 41, No. 6, pp. 11-15, June 1998.
14. T. Lunt, DARPA ID PI meeting, Santa Cruz, CA, July 1996.
15. K. Meyer, J. Betser, M. Erlinger, C. Sunshine, G. Goldzchmidt, Y. Yemini, "Decentralizing Control and Intelligence in Network Management", IFIP/IEEE Symposium on Integrated Management, Santa Barbara, CA, May 1995.
16. J.G. Myers, "Simple Authentication and Security Layer (SASL)", RFC 2222, October 1997.
17. D. New and M.T. Rose, "Reliable Delivery for syslog", http://www.cs.hmc.edu/clinic/projects/2000/aerospace/internet-drafts/draft-ietf-syslog-reliable-04.txt (work in progress), February 2001.
18. M.T. Rose, "The Blocks Extensible Exchange Protocol Framework", RFC 3080, March 2001.
19. D. Schnackenberg, K. Djahandari, and D. Sterne, "Infrastructure for Intrusion Detection and Response", DARPA Information Survivability Conference and Exposition (DISCEX), Hilton Head Island, SC, January 2000.
20. R. Smith et al., "Multi Community Cyber Defense", DARPA IA&S PI Meeting, Phoenix, AZ, August 1999.
21. The DARPA Common Intrusion detection Framework (CIDF), Unpublished working draft, distributed at DARPA PI meeting, Savannah, GA, February 1997.
22. E. Tsimberg, M. Samuel, M. Schnaider, A. Walther, M. Erlinger, J. Betser, "Tools and Protocols for Intrusion Detection Systems", Harvey Mudd College CS Clinic report, Aerospace technical report ATR-2000(7639)-3, May 2000.
23. B. Tung, "The Common Intrusion Detection Specification language: a Retrospective", DISCEX, Hilton Head, SC, January 2000.
24. B. Wood, G. Schudel, "Red Team Experiments 9901 and 9907", DARPA IA&S PI Meeting, Phoenix, AZ, August 1999.
25. Y. Yemini, J. Betser, M. Erlinger, J. Bannister, "Decentralized Management by Delegation, Networking", DARPA PI Meeting, Santa Fe, NM, September 1994.