Plan recognition in intrusion detection systems

Proceedings - DARPA Information Survivability Conference and Exposition II, DISCEX 2001

Volumn 1, Issue , 2001, Pages 46-55

  Geib, C W ^a   Goldman, R P ^a  

^a HONEYWELL TECHNOLOGY CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ARTIFICIAL INTELLIGENCE; COMPUTER CRIME; MERCURY (METAL); NETWORK SECURITY;

ARTIFICIAL INTELLIGENCE METHODS; INTRUSION DETECTION SYSTEMS; PLAN RECOGNITION;

INTRUSION DETECTION;

EID: 84964528090     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2001.932191     Document Type: Conference Paper

References (20)

1. "Intrusion Detection Message Exchange Format," http://search.ietf.org/-internet-drafts/-draft-ietf-idwg-idmef-xml-01.txt.
2. E. Charniak and R. P. Goldman, "A Bayesian Model of Plan recognition," Artificial Intelligence, vol. 64, no. 1, pp. 53-79, November 1993.
3. E. Charniak and D. McDermott, Introduction to Artificial Intelligence, Addison Wesley, Reading, MA, 1985.
4. P. R. Cohen, C. R. Perrault, and J. F. Allen, "Beyond Question Answering," in Strategies for Natural Language Processing, W. Lehnert and M. Ringle, editors, pp. 245-274, Lawrence Erlbaum Associates, Hillsdale, NJ, 1981.
5. K. Erol, J. Hendler, and D. S. Nau, "UMCP: A Sound and Complete Procedure for Hierarchical Task Network Planning," in Artificial Intelligence Planning Systems: Proceedings of the Second International Conference, K. J. Hammond, editor, pp. 249-254, Los Altos, CA, 1994, Morgan Kaufmann Publishers, Inc.
6. R. Feiertag, C. Kahn, P. Porras, S. Schnackenberg, S. Staniford, and B. Tung, "A Common Intrusion Detection Language (CISL)," Available at: http://www.gidos.org/drafts/language.txt.
7. M. Georgeff and A. Lansky, "Procedural Knowledge," IEEE Special Issue on Knowledge Representation, vol. 74, pp. 1383-1398, October 1986.
8. R. P. Goldman, C. W. Geib, and C. A. Miller, "A New Model of Plan Recognition," in Proceedings of the 1999 Conference on Uncertainty in Artificial Intelligence, 1999.
9. R. P. Goldman, W. Heimerdinger, S. Harp, C. W. Geib, V. Thomas, and R. Carter, "Information Modeling for Intrusion Report Aggregation," in Proceedings of the DARPA Information Survivability Conference and Exposition II (DISCEX-II 2001), 2001.
10. M.-Y. Huang and T. M. Wicks, "A Large-sace Distributed Intrusion Detection Framework Based on Attack Strategy Analysis," in Recent Advances in Intrusion Detection (RAID98), 1998.
11. M. J. Huber, E. H. Durfee, and M. P. Wellman, "The Automated Mapping of Plans for Plan recognition," in Uncertainty in Artificial Intelligence,Proceedings of the Tenth Conference, R. L. de Mantaras and D. Poole, editors, pp. 344-351. Morgan Kaufmann, July 1994.
12. F. Ingrand, M. Georgeff, and A. Rao, "An Architecture for Real-Time Reasoning and System Control," IEEE Expert, vol. 7:6, pp. 34-44, dec 1992.
13. H. Kautz and J. F. Allen, "Generalized plan recognition," in Proceedings of the Fifth National Conference on Artificial Intelligence, pp. 32-38, 1986.
14. D. Poole, "Logic Programming, Abduction and Probability: a top-down anytime algorithm for stimating prior and posterior probabilities," New Generation Computing, vol. 11, no. 3-4, pp. 377-400, 1993.
15. D. V. Pynadath and M. P. Wellman, "Generalized Queries on Probabilistic Context-Free Grammars," To appear in IEEE PAMI, 1997.
16. C. Schmidt, N. Sridharan, and J. Goodson, "The plan recognition problem: an intersection of psychology and artificial intelligence," Artificial Intelligence, vol. 11, pp. 45-83, 1978.
17. C. L. Sidner, "Plan parsing for intended response recognition in discourse," Computational Intelligence, vol. 1, no. 1, pp. 1-10, 1985.
18. M. Vilain, "Getting Serious about Parsing Plans: A Grammatical Analysis of Plan Recognition," in Proceedings of the Eighth National Conference on Artificial Intelligence, pp. 190-197, Cambridge, MA, 1990, MIT Press.
19. M. P. Wellman and D. V. Pynadath, "Plan Recognition under Uncertainty," Unpublished web page, 1997.
20. R. Wilensky, Planning and Understanding, Addison-Wesley, Reading, MA, 1983.