NDLI: Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection framework

Please wait, while we are loading the content...

Information notice on research in Europe : E-NEXT: Network of excellence in emerging networking experiments and technologies http://www.ist-e-next.net/

2005 reviewers list

Annales Des Télécommunications : Volume 60

Annales Des Télécommunications : Volume 59

Annales Des Télécommunications : Volume 58

Annales Des Télécommunications : Volume 57

Annales Des Télécommunications : Volume 56

Annales Des Télécommunications : Volume 55

Annales Des Télécommunications : Volume 54

Annales Des Télécommunications : Volume 53

Annales Des Télécommunications : Volume 52

Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection framework

Content Provider	Springer Nature Link
Author	Cuppens, Frédéric Autrel, Fabien Bouzida, Yacine Garcia, Joaquin Gombault, Sylvain Sans, Thierry
Copyright Year	2006
Abstract	Since current computer infrastructures are increasingly vulnerable to malicious activities, intrusion detection is necessary but unfortunately not sufficient. We need to design effective response techniques to circumvent intrusions when they are detected. Our approach is based on a library that implements different types of counter-measures. The idea is to design a decision support tool to help the administrator to choose, in this library, the appropriate counter-measure when a given intrusion occurs. For this purpose, we formally define the notion of anti-correlation which is used to determine the counter-measures that are effective to stop the intrusion. Finally, we present a platform of intrusion detection that implements the response mechanisms presented in this paper.Étant donné que les systèmes informatiques sont de plus en plus vulnérables aux activités malveillantes, l’utilisation de la détection d’intrusion est nécessaire mais ne suffit pas. Nous devons élaborer des méthodes efficaces de réaction aux intrusions afin d’arrêter les intrusions détectées. Notre approche est basée sur une bibliothèque de différents types de contre-mesures. L’objectif est d’aider l’administrateur à choisir dans cette bibliothèque la contre-mesure la mieux adaptée quand une intrusion est détectée. Pour ce faire nous définissons formellement la notion d’anti-corrélation qui est utilisée pour sélectionner les contre-mesures permettant d’arrêter l’intrusion. Nous finissons par la présentation d’une plateforme de détection d’intrusion mettant en œuvre les mécanismes présentés dans cet article.
Starting Page	197
Ending Page	217
Page Count	21
File Format	PDF
ISSN	00034347
Journal	Annales Des Télécommunications
Volume Number	61
Issue Number	1-2
e-ISSN	19589395
Language	French
Publisher	Springer-Verlag
Publisher Date	2006-01-01
Publisher Place	Paris
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Sécurité informatique Détecteur intrus Protection information Corrélation Modélisation Modèle logique Communications Engineering, Networks Information Systems and Communication Service Signal, Image and Speech Processing Computer Communication Networks Information and Communication, Circuits R & D/Technology Policy
Content Type	Text
Resource Type	Article
Subject	Electrical and Electronic Engineering

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Framework to Enforce Access Control, Usage Control and Obligations

An application of principal component analysis to the detection and visualization of computer network attacks

The European regulatory framework for security and privacy protection in electronic communications

A distributed cross-layer intrusion detection system forad hoc networks

Anonymous and secure electronic transaction protocol

Behavioral network engineering: making intrusion detection become autonomic

SoCs security: a war against side-channels

One-time password-based high performance per-packet authentication for capsule networks

Optimization study of a packet classification algorithm

Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection framework

Similar Documents

A Framework to Enforce Access Control, Usage Control and Obligations

An application of principal component analysis to the detection and visualization of computer network attacks

The European regulatory framework for security and privacy protection in electronic communications

A distributed cross-layer intrusion detection system forad hoc networks

Anonymous and secure electronic transaction protocol

Behavioral network engineering: making intrusion detection become autonomic

SoCs security: a war against side-channels

One-time password-based high performance per-packet authentication for capsule networks

Optimization study of a packet classification algorithm

Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection framework