论文信息 - Distributed Intrusion Alert Fusion Based on Multi Keyword

Distributed Intrusion Alert Fusion Based on Multi Keyword

Intrusion alert fusion is a key problem in distributed intrusion detection system (DIDS). In this paper, we propose a distributed intrusion alert fusion scheme based on Multi Keywords. All the related alarms produced by local sensor can be evenly routed and fused to its corresponding sensor fusion centers (SFCs) by multi keywords, while evenly distributing unrelated alarms to different SFCs. We use DShield data collected from worldwide providers to evaluate feasibility of our scheme.

Ming Xu | Wei Han

[1] Christopher Krügel,et al. Decentralized Event Correlation for Intrusion Detection , 2001, ICISC.

[2] J. Doug Tygar,et al. The battle against phishing: Dynamic Security Skins , 2005, SOUPS '05.

[3] Philip Gross,et al. Secure "selecticast" for collaborative intrusion detection systems , 2004, ICSE 2004.

[4] Min Wu,et al. Web wallet: preventing phishing attacks by revealing user intentions , 2006, SOUPS '06.

[5] Yan Chen. Cyber Disease Monitoring with Distributed Hash Tables : A Global Peer-to-Peer Intrusion Detection System , .

[6] Vinod Yegneswaran,et al. Internet intrusions: global characteristics and prevalence , 2003, SIGMETRICS '03.

[7] Somesh Jha,et al. Global Intrusion Detection in the DOMINO Overlay System , 2004, NDSS.

[8] Steven D. Gribble,et al. A safety-oriented platform for Web applications , 2006, 2006 IEEE Symposium on Security and Privacy (S&P'06).

[9] M.E. Locasto,et al. Towards collaborative security and P2P intrusion detection , 2005, Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop.

[10] Helen J. Wang,et al. SubVirt: implementing malware with virtual machines , 2006, 2006 IEEE Symposium on Security and Privacy (S&P'06).

[11] Cormac Herley,et al. Analysis and Improvement of Anti-Phishing Schemes , 2006, SEC.

[12] Donald A. Norman,et al. Design rules based on analyses of human error , 1983, CACM.