Temporal and spatial distributed event correlation for network security

Proceedings of the American Control Conference

Volumn 2, Issue , 2004, Pages 996-1001

  Jiang, Guofei ^a   Cybenko, George ^b  

^a DARTMOUTH COLLEGE   (United States)

^b DARTMOUTH COLLEGE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER NETWORKS; COMPUTER SYSTEM FIREWALLS; CONTROL THEORY; CORRELATION METHODS; DISTRIBUTED COMPUTER SYSTEMS; MIDDLEWARE; NETWORK PROTOCOLS; PATTERN RECOGNITION; SERVERS; WORLD WIDE WEB;

INTRUSION DETECTION SYSTEMS (IDS); NETWORK SECURITY; PROCESS QUERY SYSTEMS;

SECURITY OF DATA;

EID: 8744316761     PISSN: 07431619     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.23919/acc.2004.1386701     Document Type: Conference Paper

References (19)

1. Vince Berk, Robert Gray and George Bakos, "Using sensor networks and data fusion for early detection of active worms", Proc. of 2003 SPIE Aerosense Conference, Orlando, FL, April, 2003.
2. James Cowie, Andy T. Ogielski, BJ Premore and Yougu Yuan, "Internet worms and global routing instabilities", Proceedings of SPIE, Vol. #4868, July/August 2002.
3. Herbert A. Edelstein, Introduction to Data Mining and Knowledge Discovery, Two Crows Corporation, 1999.
4. S. A. Yemini, S. Kliger, E. Mozes, Y. Yemini and D. Ohsie, "High speed and robust event correlation", IEEE Communications Magazine, May, 1996.
5. Vincent Poor, An Introduction to Signal Detection and Estimation, Springer-Verlag, 1994.
6. C. Howson and P. Urbach, Scientific Reasoning: the Bayesian Approach, Open Court Publishing Company, La Salle, 1989.
7. N.S. Abouzakhar and A. Gani et.al., "bayesian leaning networks approach to cybercrime detection", PGNet 2003, June 16-17, 2003, Liverpool, UK.
8. Koral Ilgun, Richard A. Kemmerer and Phillip A. Porras, "State transition analysis: a rule-based intrusion detection approach", IEEE Trans. On Software Engineering, Vol. 21, No.3, March, 1995.
9. Sandeep Kumar and Eugene H. Spafford, "A pattern-matching model for instrusion detection", in Proceedings of the National Computer Security Conference, pp. 11-21, Oct. 1994.
10. S. Hofmeyr, S. Forrest, and A. Somayaji "Intrusion detection using sequences of system calls." Journal of Computer Security, Vol. 6, pp. 151-180, 1998.
11. C.C.W. Ko, Execution Monitoring of Security-Critical Programs in a Distributed System: A Specification-Based Approach, Ph.D. Thesis, University of California at Davis, August 1996
12. Lawrence D. Stone, Carl A. Barlow, and Thomas L. Corwin, Bayesian Multiple Target Tracking, Artech House, Norwood, MA, 1999.
13. R.E. Kalman, "A new approach to linear filtering and prediction problems," J. Basic Emg., vol. 82-D, 1969.
14. Lawrence R. Rabiner, "A tutorial on hidden markov models and selected applications in speech recognition", Proceedings of The IEEE, Vol. 77, No. 2, February 1989.
15. A. Wald, Sequential Analysis, John Wiley & Sons, 1947.
16. Cliff Changchun Zou, Lixin Gao, Weibo Gong, and Don Towsley. "Monitoring and early warning for internet worms", 10th ACM Conference on Computer and Communication Security (CCS'03), Oct. 27-31, WashingtonDC, USA, 2003.
17. B.P.C. Warrender, S. Forrest, "Detecting intrusion using system calls: alternative data models", 1999 IEEE Symposium on Security and Privacy, 1999.
18. Guofei Jiang, "Weak model for robust process detection", SPIE Symposium on Defence and Security, Florida, April, 2004.
19. Vince Berk and Wayne Chung et.al., "Process query system for surveillance and awareness", 7th World Multi-conference on Systemics, Cybernetics and Informatics (SCI2003), July 27-39,x Orlando, FL, 2003.