SEC - A lightweight event correlation tool

2002 IEEE Workshop on IP Operations and Management, IPOM 2002

Volumn , Issue , 2002, Pages 111-115

  Vaarandi, R ^a  

^a TALLINN UNIVERSITY OF TECHNOLOGY   (Estonia)

Author keywords

event correlation

Indexed keywords

NETWORK MANAGEMENT;

EVENT CORRELATION; ITS APPLICATIONS; NETWORK FAULT MANAGEMENT; OPEN SOURCES; PLATFORM INDEPENDENT; RULE BASED; USER TRAINING;

COMPLEX NETWORKS;

EID: 84964318825     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IPOM.2002.1045765     Document Type: Conference Paper

References (17)

1. G. Jakobson, M. Weissman, L. Brenner, C. Lafond, C. Matheus, "GRACE: Building Next Generation Event Correlation Services", Proceedings of the 7th Network Operations and Management Symposium, pp. 701-714, April 2000.
2. Stuart Staniford, James A. Hoagland, Joseph A. McAlerney, "Practical Automated Detection of Stealthy Portscans", in press (to appear in the Journal of Computer Security).
3. S. Staniford-Chen et al., "GrIDS - A Graph-Based Intrusion Detection System for Large Networks", Proceedings of the 19th National Information Systems Security Conference, pp. 361-370, October 1996.
4. Martin Roesch, "Snort - Lightweight Intrusion Detection for Networks", Proceedings of USENIX 13th System Administration Conference, pp. 229-238, November 1999.
5. Stephen E. Hansen and E. Todd Atkins, "Automated System Monitoring and Notification With Swatch", Proceedings of USENIX 7th System Administration Conference, pp. 145-152, November 1993.
6. Wolfgang Ley and Uwe Ellerman, logsurfer(1) and logsurfer.conf(4) manual pages, unpublished (see http://www.cert.dfn.de/eng/logsurf/).
7. Matt Bing and Carl Erickson, "Extending UNIX System Logging with SHARP", Proceedings of USENIX 14th System Administration Conference, pp. 101-108, December 2000.
8. Hewlett-Packard Company, Event Correlation Services - Designer's Guide, HP document J1095-90304, 1998.
9. SMARTS, http://www.smarts.com.
10. NerveCenter, http://www.open.com/htm/nervecenter.htm
11. Shane O'Donnell, "Network Management: Open Source Solutions to Proprietary Problems", Proceedings of the 28th SIGUCCS Conference on User Services, pp. 208-217, October 2000.
12. OpenNMS, http://www.opennms.org.
13. CLIPS, http://www.ghg.net/clips/CLIPS.html.
14. G. Jakobson and M. Weissman, "Real-time telecommunication network management: Extending event correlation with temporal constraints", Proceedings of the 4th International Symposium on Integrated Network Management, pp. 290-301, May 1995.
15. Risto Vaarandi, "Platform Independent Event Correlation Tool for Network Management", Proceedings of the 8th Network Operations and Management Symposium, pp. 907-909, April 2002.
16. Peter Wainwright et al., Professional Perl Programming, Birmingham, UK, Wrox Press Ltd., 2001.
17. Hugh R. Casey, The Simple Event Monitor, A Tool for Network Management,MSc thesis, University of Colorado, 2002.