A pattern matching based filter for audit reduction and fast detection of potential intrusions

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 1907, Issue , 2000, Pages 17-27

  Kuri, Josué ^a   Navarro, Gonzalo ^b   Mé, Ludovic ^c   Heye, Laurent ^c  

^a TELECOM PARISTECH   (France)

^b UNIVERSITY OF CHILE   (Chile)

^c SUPELEC   (France)

Author keywords

[No Author keywords available]

Indexed keywords

PATTERN MATCHING;

APPROXIMATE PATTERN MATCHING; AUDIT TRAILS; FAST DETECTIONS; FILTERING EFFICIENCY; MISUSE DETECTION; POTENTIAL ATTACK; PROBABILITY OF FALSE NEGATIVES;

INTRUSION DETECTION;

EID: 84944264709     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-39945-3_2     Document Type: Conference Paper

References (9)

1. J. P. Anderson. Computer security threat monitoring and surveillance. Technical report, James P. Anderson Company, Fort Washington, Pennsylvania, April 1980. 17
2. Teresa F. Lunt. A survey of intrusion detection techniques. Computers and Security, 12, 1993. 17
3. T. D. Garvey and T. F. Lunt. Model-based intrusion detection. In Proceedings of the 14th National Computer Security Conference, October 1991. 17
4. Ludovic Mé. Gassata, a genetic algorithm as an alternative tool for security audit trails analysis. In First international workshop on the Recent Advances in Intrusion Detection, 1998. 18
5. J. Kuri and G. Navarro. Fast multipattern search algorithms for intrusion detection. Technical Report TR/DCC-99-11, Dept. of Computer Science, Univ. of Chile, December 1999. To appear in 7th International Symposium on String Processing and Information Retrieval (SPIRE’00), IEEE CS Press. 20, 26
6. R. Baeza-Yates and G. Navarro. Faster approximate string matching. Algorithmica, 23(2):127–158, 1999. 22
7. G. Navarro. Approximate Text Searching. PhD thesis, Dept. of Computer Science, Univ. of Chile, December 1998. Technical Report TR/DCC-98-14. ftp://ftp.dcc.uchile.cl/pub/users/gnavarro/thesis98.ps.gz.22
8. M. Bishop. A standard audit log format. In Proceedings of the 19th National Information Systems Security Conference, pages 136–145, October 1995. 23
9. P. D’haeseleer, S. Forrest, and P. Helman. An immunological approach to change detection: Algorithms, analysis and implications. In Proceedings of the 1996 IEEE Symposium on Research in Security and Privacy. IEEE Computer Society, IEEE Computer Society Press, May 1996. 27