Information modeling for intrusion report aggregation

Proceedings - DARPA Information Survivability Conference and Exposition II, DISCEX 2001

Volumn 1, Issue , 2001, Pages 329-342

  Goldman, R P ^a   Heimerdinger, W ^a   Harp, S A ^a   Geib, C W ^a   Thomas, V ^a   Carter, R L ^a  

^a HONEYWELL TECHNOLOGY CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MERCURY (METAL); SECURITY OF DATA;

HARDWARE AND SOFTWARE; INFORMATION MODELING; INFORMATION OVERLOADS; INFORMATION SOURCES; INTRUSION DETECTION SYSTEMS; INTRUSION SITUATION; REFERENCE MODELING; SECURITY POLICY;

INTRUSION DETECTION;

EID: 84964509928     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2001.932228     Document Type: Conference Paper

References (13)

1. "Intrusion Detection Message Exchange Format," http://search.ietf.org/internet-drafts/draft-ietf-idwg-idmef-xml-01.txt.
2. A. Borgida, R. J. Brachman, D. L. McGuinness, and L. A. Resnick, "CLASSIC: A Structural Data Model for Objects," in ACM SIGMOD International Conference on the Management of Data, pp. 58-67, 1989.
3. R. J. Brachman, D. L. McGuinness, P. F. Patel-Schneider, L. A. Resnick, and A. Borgida, "Living with CLASSIC: When and How to use a KL-ONE-like Language," in Principles of Semantic Networks, J. F. Sowa, editor, chapter 14, pp. 401-456, Morgan Kaufmann Publishers, Inc., Los Altos, CA, 1991.
4. R. Feiertag, C. Kahn, P. Porras, S. Schnackenberg, S. Staniford, and B. Tung, "A Common Intrusion Detection Language (CISL)," Available at: http://www.gidos.org/drafts/language.txt.
5. A. K. Ghosh, A. Schwartzbard, and M. Schatz, "Using Program Behavior Profiles for Intrusion Detection," in SANS Workshop on the State of the Art and Future Directions of Intrusion Detection and Response, February 1999.
6. A. K. Ghosh, J. Wanken, and F. Charron, "Detecting Anomalous and Unknown Intrusions Against Programs," in Proceedings of Annual Computer Security Applications Conference (ACSAC'98), December 1998.
7. M. Goldszmidt and J. Pearl, "Rank-based systems: A simple approach to belief revision, belief update and reasoning about evidence and actions," in Proceedings of the Third International Conference on Principles of Knowledge Representation and Reasoning, Cambridge, MA, October 1992.
8. K. Ilgun, R. A. Kemmerer, and P. A. Porras, "State Transition Analysis: A Rule-based Intrusion Detection Approach," IEEE Transactions on Software Engineering, vol. 21, no. 3,, mar 1995.
9. J. Pearl, Probabilistic Reasoning in Intelligent Systems: Networks of Plausible Inference, Morgan Kaufmann Publishers, Inc., Los Altos, CA, 1988.
10. P. Porras and P. Neumann, "EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances," in National Information Security Conference, 1997.
11. D. Schnackenberg, K. Djahandari, and D. Sterne, "Infrastructure for intrusion detection and response," in DARPA Information Survivability Conference and Exposition(DISCEX-2000), 2000.
12. B. Schneier, Secrets & Lies, John Wiley & Sons, 2000.
13. T. Shimomura and J. Markoff, Takedown : The Pursuit and Capture of Kevin Mitnick, America's Most Wanted Computer Outlaw - By the Man Who Did It, Hyperion, 1996.