A formal approach to sensor placement and configuration in a network intrusion detection system

Proceedings - International Conference on Software Engineering

Volumn 2006-May, Issue , 2006, Pages 65-71

  Rolando, Marco ^a   Rossi, Matteo ^a   Sanarico, Niccolo ^a   Mandrioli, Dino ^a  

^a POLITECNICO DI MILANO   (Italy)

Author keywords

Formal model; Intrusion detection systems; Network analysis; Sensor configuration; Sensor placement

Indexed keywords

COMPUTER CRIME; ELECTRIC NETWORK ANALYSIS; MERCURY (METAL); SOFTWARE ENGINEERING;

FORMAL DEFINITION; FORMAL MODEL; INTRUSION DETECTION SYSTEMS; LOGIC-BASED MODELING; NETWORK ADMINISTRATOR; NETWORK INTRUSION DETECTION SYSTEMS; SENSOR CONFIGURATIONS; SENSOR PLACEMENT;

INTRUSION DETECTION;

EID: 84953403259     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1137627.1137638     Document Type: Conference Paper

References (14)

1. E. Carter, editor. Cisco Secure Intrusion Detection System. Cisco Press, 2002.
2. W. F. Clocksin and C. S. Mellish. Programming in Prolog. Using the ISO Standard. Springer-Verlag, 2003.
3. T. H. Cormen, C. E. Leiserson, R. L. Rivest, and C. Stein. Introduction to Algorithms. The MIT Press, 2nd edition, 2001.
4. C. Krugel, D. Mutz, W. Robertson, and F. Valeur. Topology-based detection of anomalous BGP messages. In Proc. of RAID, pages 17-35, 2003.
5. V. Mittal and G. Vigna. Sensor-based intrusion detection for intra-domain distance-vector routing. In Proc. of CCS 2002, pages 127-137, 2002.
6. S. Northcutt and J. Novak. Network Intrusion Detection. New Riders Publishing, 2002.
7. X. Ou, S. Govindavajhala, and A. W. Appel. MulVAL: A logic-based network security analyzer. In Proc. of 14th USENIX Security Symposium, pages 113-128, 2005.
8. R. W. Ritchey and P. Ammann. Using model checking to analyze network vulnerabilities. In IEEE Symp. on Security and Privacy, pages 156-165, 2000.
9. M. Roesch. Snort: Lightweight intrusion detection for networks. In Proc. of the 13th Conf. on Systems Administration, pages 229-238, November 1999.
10. Matteo Rossi. On probe placement and configuration in an intrusion detection system. Technical report, DEI, Politecnio di Milano, 2002.
11. G. Rothmaier and H. Krumm. A framework based approach for formal modeling and analysis of multi-level attacks in computer networks. In Proc. of FORTE, pages 247-260, 2005.
12. O. Sheyner, J. W. Haines, S. Jha, R. Lippmann, and J. M. Wing. Automated generation and analysis of attack graphs. In IEEE Symp. on Security and Privacy, pages 273-284, 2002.
13. G. Vigna and R. A. Kemmerer. NetSTAT: A Network-based Intrusion Detection System. Journal of Computer Security, 7(1):37-71, 1999.
14. G. Vigna, F. Valeur, and R. A. Kemmerer. Designing and implementing a family of intrusion detection systems. In Proc. of FSE/ESEC, pages 88-97, 2003.