Enlisting event patterns for cyber battlefield awareness

Proceedings - DARPA Information Survivability Conference and Exposition, DISCEX 2000

Volumn 2, Issue , 2000, Pages 411-422

  Perrochon, L ^a   Jang, Eunhei ^a   Kasriel, S ^a   Luckham, D C ^a  

^a STANFORD UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CAUSAL RELATIONS; COMPLEX EVENT PROCESSING (CEP); DECLARATIVE LANGUAGES; EVENT CORRELATION; INFORMATION INFRASTRUCTURES; LARGE-SCALE ATTACKS; LEVEL OF ABSTRACTION; STANFORD UNIVERSITY;

INTRUSION DETECTION;

EID: 84962295060     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2000.821538     Document Type: Conference Paper

References (33)

1. Network Associates Inc., CyberCop Scanner. 1999.
2. Internet Security Systems, RealSecure. 1999.
3. Security Dynamics Inc., Kane Security Monitor. 1999.
4. AXENT, NetProwler. 1999.
5. Net Flight Recorder Inc., Net Flight Recorder. 1999.
6. CISCO, NetRanger. 1999.
7. SRI, Emerald. 1999.
8. Santoro, A., Causal Modeling of Event-Based Distributed Systems, in Electrical Engineering. 1999, Stanford University: Stanford.
9. Vera, J.S., Software Architecture Description Languages: Descriptive Constructs and Execution Algorithms, in Electrical Engineering. 1999, Stanford University: Stanford.
10. Perrochon, L., et al. Event Mining with Event Processing Networks. in The Third Pacific-Asia Conference on Knowledge Discovery and Data Mining (PAKDD-99). April 26-28, 1999. Beijing, China: Springer.
11. Perrochon, L. and W. Mann, Inferred Designs. IEEE Software, 1999(Sept./Oct.).
12. Pratt, V.R., Modeling concurrency with partial orders. Int. J. of Parallel Programming, 1986. 15(1): p. 33-71.
13. Fidge, C.J., Timestamps in message-passing systems that preserve the partial ordering. Australian Computer Science Communications, 1988. 10(1): p. 55-66.
14. Mattern, F. Virtual Time and Global States of Distributed Systems. in Parallel and Distributed Algorithms: Elsevier Science Publishers.
15. Meldal, S., S. Sankar, and J. Vera. Exploiting Locality in Maintaining Potential Causality. in 10th ACM Symposium on the Principles of Distributed Computing. August. New York, New York: ACM Press.
16. Vera, J., L. Perrochon, and D.C. Luckham. Event Based Execution Architectures for Dynamic Software Systems. in TC2 First Working IFIP Conference on Software Architecture (WICSA1). February 22-24, 1999. San Antonio, Texas, USA: Kluwer.
17. RAPIDE, Rapide 1.0 Pattern Language Reference Manual. 1997, Stanford University: Stanford.
18. Luckham, D.C. and B. Frasca, Complex Event Processing in Distributed Systems. 1998, Stanford University: Stanford.
19. Kasriel, S., Managing Event Processing Networks, in Computer Science. 1999, Stanford University: Stanford.
20. Perrochon, L. and S. Kasriel, Managing Event Processing Networks. 1999, Stanford University: Stanford.
21. Kahn, C., et al., A Common Intrusion Detection Framework (CIDF). 1999, CIDF Working Group.
22. IDWG, IETF Intrusion Detection Working Group,. 1999, Internet Engineering Task Force (IETF).
23. Porras, P.A. and P.G. Neumann. EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances. in Nineteenth National Computer Security Conference. 22-25 October 1997. Baltimore, Maryland.
24. Lunt, T.F., et al., A Real-Time Intrusion-Detection Expert System (IDES). 1992, Computer Science Laboratory SRI International: Menlo Park.
25. Kumar, S. and E.H. Spafford, An Application of Pattern Matching in Intrusion Detection. 1994, Departement of Computer Science, Purdue University: West Lafayette, IN.
26. Kumar, S. and E.H. Spafford, A Software Architecture to support Misuse Intrusion Detection. 1995, Departement of Computer Science, Purdue University: West Lafayette, IN.
27. Lindqvist, U. and P.A. Porras. Detecting Computer and Network Misuse Through the Production-Based Expert System Toolset (PBEST). in 1999 IEEE Symposium on Security and Privacy. May 9-12, 1999. Oakland, California: IEEE Computer Society Press.
28. Vaccaro, H.S. and G.E. Liepins. Detection of anomalous computer session activity. in 1989 IEEE Symposium on Security and Privacy. May 1-3, 1989. Oakland, California: IEEE Computer Society Press.
29. Jackson, K.A., D.H. DuBois, and C.A. Stallings. An Expert System Application for Network Intrusion Detection. in 14th National Computer Security Conference. October 1-4, 1991. Washington, DC: National Institute of Standards and Technology/National Computer Security Center.
30. Network Associates Inc., Event Orchestrator. 1999.
31. Sheers, K.R., HP OpenView Event Correlation Services. Hewlett-Packard Journal, 1996(October).
32. Yemini, S., et al., High Speed & Robust Event Correlation. 1996, System Management Arts (SMARTS): White Plains, NY 10601.
33. Piatetsky-Shapiro, G. and W.J. Frawley, eds. Knowledge Discovery in Databases.. 1991, AAAI Press/The MIT Press.