NDLI: Building intrusion path graphs for security incident handling procedures

Content Provider	IEEE Xplore Digital Library
Author	Guo-Tan Liao Li-Ru Chen Bo-Chao Cheng Huan Chen Ping-Hai Hsu
Copyright Year	2010
Description	Author affiliation: Information and Communications Research Laboratories, ITRI, Taiwan (Ping-Hai Hsu) \|\| Department of Communications Engineering, National Chung-Cheng University, Taiwan (Guo-Tan Liao; Li-Ru Chen; Bo-Chao Cheng; Huan Chen)
Abstract	Hardening network services and network architecture is the best defense and the easiest way to reduce security risks. However, there is no effective solution to correlate all weaknesses, network topology with connectivity, and intrusion alerts. As a result, it can be difficult for network administrators to determine the root cause of a security incident. In this paper, we propose “GReat Evil ENcroachments Eradicator (GREENER)”, which can analyze the above network information in-depth and establish an intrusion path graph to display comprehensive information of security breaches. With the help of GREENER, system administrators can discover detailed information about an incident and rapidly remove network intrusion issues associated with the hardening process to prevent the same type of intrusion from happening again. This study has demonstrated that GREENER meets the requirements for mitigating security threats and provides a practical security incident response solution.
Starting Page	267
Ending Page	272
File Size	356480
Page Count	6
File Format	PDF
ISBN	9781424470075
e-ISBN	9781424470105
e-ISBN	9781424470099
DOI	10.1109/ISCIT.2010.5664848
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-10-26
Publisher Place	Japan
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Network topology Operating systems Green products Intrusion detection Fires Internet
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Towards Automated Incident Handling: How to Select an Appropriate Response against a Network-Based Attack?

The study on network intrusion detection system of Snort

Enhancing network intrusion detection system with honeypot

IRSS: Incident Response Support System

Energy-Efficient Network Intrusion Detection Systems in the IOT Networks

A comprehensive semi-automated incident handling workflow

Parallel analysis for lightweight network incident detection using nonlinear adaptive systems

Hidden processes: the implication for intrusion detection

Fuzzy network profiling for intrusion detection

Building intrusion path graphs for security incident handling procedures

Similar Documents

Towards Automated Incident Handling: How to Select an Appropriate Response against a Network-Based Attack?

The study on network intrusion detection system of Snort

Enhancing network intrusion detection system with honeypot

IRSS: Incident Response Support System

Energy-Efficient Network Intrusion Detection Systems in the IOT Networks

A comprehensive semi-automated incident handling workflow

Parallel analysis for lightweight network incident detection using nonlinear adaptive systems

Hidden processes: the implication for intrusion detection

Fuzzy network profiling for intrusion detection

Building intrusion path graphs for security incident handling procedures