Application-integrated data collection for security monitoring

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2212, Issue , 2015, Pages 22-36

  Almgren, Magnus ^a   Lindqvist, Ulf ^a  

^a SRI INTERNATIONAL   (United States)

Author keywords

Apache; Application; Application integrated; Intrusion detection; Module; Web server

Indexed keywords

APPLICATIONS; COMPUTER CRIME; DATA ACQUISITION; MERCURY (METAL); WEB SERVICES; WORLD WIDE WEB;

APACHE; DATA COLLECTION METHOD; DATA COLLECTION MODULES; INTRUSION DETECTION SYSTEMS; MODULE; REAL-TIME TRANSACTIONS; SECURITY MONITORING; WEB SERVERS;

INTRUSION DETECTION;

EID: 84947584994     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: None     Document Type: Article

References (12)

1. M. Almgren, H. Debar, and M. Dacier. A lightweight tool for detecting web server attacks. In Proceedings of the 2000 ISOC Symposium on Network and Distributed Systems Security, pages 157-170, San Diego, California, Feb. 2-4, 2000.
2. W. R. Cheswick and S. M. Bellovin. Firewalls and Internet Security: Repelling the Wily Hacker. Addison-Wesley, 1994.
3. T. E. Daniels and E. H. Spafford. Identification of host audit data to detect attacks on low-level IP vulnerabilities. Journal of Computer Security, 7(1):3-35, 1999.
4. T. E. Daniels and E. H. Spafford. A network audit system for host-based intrusion detection (NASHID) in Linux. In Proceedings of the 16th Annual Computer Security Applications Conference, New Orleans, Louisiana, Dec. 11-15, 2000.
5. B. Dayioglu, Mar. 2001. http://yunus.hacettepe.edu.tr/burak/modid/.
6. K. A. Jackson. Intrusion detection system (IDS) product survey. Technical Report LA-UR-99-3883, Los Alamos National Laboratory, Los Alamos, New Mexico, June 25, 1999. Version 2.1.
7. The Netcraft Web server survey, Feb. 2001. http://www.netcraft.com/survey/.
8. P. A. Porras and P. G. Neumann. EMERALD: Event monitoring enabling responses to anomalous live disturbances. In Proceedings of the 20th National Information Systems Security Conference, pages 353-365, Baltimore, Maryland, Oct. 7-10, 1997. National Institute of Standards and Technology/National Computer Security Center.
9. T. H. Ptacek and T. N. Newsham. Insertion, evasion, and denial of service: Eluding network intrusion detection. Technical report, Secure Networks, Inc., Calgary, Alberta, Canada, Jan. 1998. http://www.clark.net/roesch/idspaper.html.
10. RadView Software, Inc., Mar. 2001. http://www.radview.com/.
11. Sanctum, Inc., Mar. 2001. http://www.sanctuminc.com/.
12. L. Stein and D. MacEachern. Writing Apache Modules with Perl and C. O’Reilly & Associates, 1999.