Experiences with specification-based intrusion detection

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2212, Issue , 2015, Pages 172-189

  Uppuluri, Prem ^a   Sekar, R ^a  

^a Stony Brook University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MERCURY (METAL); SPECIFICATIONS;

ANOMALY DETECTION; BEHAVIORAL SPECIFICATION; FALSE POSITIVE; INTRUSION DETECTION SYSTEMS; MISUSE DETECTION; OFFLINE EVALUATION; ON-LINE EVALUATION; UNKNOWN ATTACKS;

INTRUSION DETECTION;

EID: 84947547225     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: None     Document Type: Article

References (8)

1. T. Bowen et al, Building Survivable Systems: An Integrated Approach Based on Intrusion Detection and Confinement, DISCEX 2000.
2. CERT Coordination Center Advisories 1988-1998, http://www.cert.org/advisories/index.html.
3. Classification of system calls using security based criteria, http://seclab.cs.sunysb.edu/prem/classifbody.html.
4. Specifications used for 1999 DARPA offline evaluation, http://seclab.cs.sunysb.edu/prem/specs.html.
5. R. Lippmann, J.W. Haines, D. Fried, J. Korba and K. Das, The 1999 DARPA Off-line evaluation Intrusion Detection Evaluation, Computer Networks, 34, 2000.
6. SunSHIELD Basic Security Module Guide, http://docs.sun.com.
7. R. Sekar, Y. Guang, T. Shanbhag and S. Verma, A High-Performance Network Intrusion Detection System, ACM Computer and Communication Security Conference, 1999.
8. R. Sekar and P. Uppuluri, Synthesizing Fast Intrusion Prevention/Detection Systems from High-Level Specifications, USENIX Security Symposium, 1999.