Security agility in response to intrusion detection

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2000, Pages 11-20

  Petkac, Mike ^a   Badger, Lee ^a  

^a NAI Labs   (United States)

Author keywords

Distributed computing; Intrusion detection; Mission critical systems; Packaging; Runtime; Security; Software design; Software packages; Software prototyping; Software tools

Indexed keywords

COMPUTER AIDED SOFTWARE ENGINEERING; COMPUTER SOFTWARE; DISTRIBUTED COMPUTER SYSTEMS; MERCURY (METAL); NETWORK SECURITY; PACKAGING; SECURITY OF DATA; SECURITY SYSTEMS; SOFTWARE DESIGN; SOFTWARE PACKAGES; SOFTWARE PROTOTYPING;

COOPERATIVE FRAMEWORKS; DISTRIBUTED SYSTEMS; INTRUSION DETECTION AND RESPONSE; INTRUSION RESPONSE; MISSION CRITICAL SYSTEMS; RUNTIMES; SECURITY; SECURITY AWARENESS;

INTRUSION DETECTION;

EID: 84949512710     PISSN: 10639527     EISSN: None     Source Type: Journal    
DOI: 10.1109/ACSAC.2000.898853     Document Type: Article

References (23)

1. rd UNIX Security Symposium, Baltimore, MD, September 1992
2. M. Petkac, L. Badger, and W. Morrison. "Security Agility for Dynamic Execution Environments," In Proceedings of the DARPA Information Survivability Conference and Exposition, Hilton Head, SC, January 2000
3. T. Fraser, L. Badger, and M. Feldman. "Hardening COTS Software with Generic Software Wrappers." In Proceedings of the 1999 IEEE Symposium of Security and Privacy, Oakland, CA, May 1999, p. 2
4. L. Badger, D. F. Sterne, D. L. Sherman, and K. M. Walker. "A Domain and Type Enforcement UNIX Prototype," In USENIX Computing Systems Vol 9, No. 1, Winter 1996
5. th National Computer Security Conference, 1985
6. D. E. Bell and L. LaPadula. Secure Computing System: Unified Exposition and Multics Interpretation. Technical Report EDS-TR-75-306, Electronics Systems Division, AFSC, Hanscom AF Base, Bedford, MA, 1976
7. K. J. Biba. Integrity Considerations for Secure Computing Systems. Technical Report ESD-TR-76-372, AFSC Electronics Systems Division, Bedford, MA, 1977
8. D. D. Clark and D. R. Wilson. "A Comparison of Commercial and Military Computer Security Policies," In Proceedings of the 1987 IEEE Symposium on Security and Privacy, Oakland, CA, 1987
9. P. Porras, D. Schnackenberg, S. Staniford-Chen, M. Stillman, and F. Wu. "The Common Intrusion Detection Framework," CIDF working group document, http://www.gidos.org
10. R. Feiertag, C. Kahn, P. Porras, D. Schnackenberg, S. Staniford-Chen, and B. Tung. "A Common Intrusion Specification Language", CIDF working group document, http://www.gidos.org
11. M. Wood, "Intrusion detection exchange format requirements," Internet Draft, Internet Engineering Task Force, July 1999
12. H. Debar, M.-Y. Huang, and D. Donahoo. "Intrusion Detection Exchange Format Data Model," Internet Draft, Internet Engineering Task Force, January 2000
13. D. Schnackenberg, K. Djahandari, and D. Sterne. "Infrastructure for Intrusion Detection and Response," In Proceedings of the DARPA Information Survivability Conference and Exposition, Hilton Head, SC, January 2000
14. M. Pietrek. Windows 95 System Programming Secrets. IDG Books Worldwide, Inc. 1995
15. T. Bowan, D. Chee, M. Segal, R. Sekar, T. Shanbhag, and P. Uppuluri. "Building Survivable Systems: An Integrated Approach based on Intrusion Detection and Damage Containment," In Proceedings of the DARPA Information Survivability Conference and Exposition, Hilton Head, SC, January 2000
16. th ACM Symposium on Operating System Principles (SOSP-15), Copper Mountain, CO, December 1995, p 267
17. D. Hollingsworth, T. Redmond, and R. Rice. "Security Policy Realization in an Extensible Operating System," In Proceedings of the DARPA Information Survivability Conference and Exposition, Hilton Head, SC, January 2000
18. M. Hiltunen, R. Schlichting, C. Ugarte, and G. Wong. "Survivability through Customization and Adaptability: The Cactus Approach," In Proceedings of the DARPA Information Survivability Conference and Exposition, Hilton Head, SC, January 2000
19. J. Eggleston, S. Jamin, T. Kelly, J. MacKie-Mason, W. Walsh, and M. Wellman. "Survivability through Market-Based Adaptivity: The MARX Project," In Proceedings of the DARPA Information Survivability Conference and Exposition, Hilton Head, SC, January 2000
20. S. Bowers, L. Delcambre, D. Maier, C. Cowan, P Wangle, D. McNamee, A.-F. Le Meur, and H. Hinton. "Applying Adaptation Spaces to Support Quality of Services and Survivability," In Proceedings of the DARPA Information Survivability Conference and Exposition, Hilton Head, SC, January 2000
21. D. Evens and A. Twyman. "Flexible Policy-Directed Code Safety," In Proceedings of the 1999 IEEE Symposium of Security and Privacy, Oakland, CA, May 1999
22. U. Erlingsson and F. Schneider. "SASI Enforcement of Security Policies: A Retrospective," In Proceedings New Security Paradigms Workshop 1999
23. R. Spencer, S. Smalley, P. Loscocco, M. Hibler, D. Anderson, and J. Lepreau. "The Flask Security Architecture: System Support for Diverse Security Policies," In Proceedings of the Eighth USENIX Security Symposium, Washington, DC, August 1999, p. 123