Ebook: Intrusion Detection in Distributed Systems: An Abstraction-Based Approach

Intrusion Detection In Distributed Systems: An Abstraction-Based Approach presents research contributions in three areas with respect to intrusion detection in distributed systems. The first contribution is an abstraction-based approach to addressing heterogeneity and autonomy of distributed environments. The second contribution is a formal framework for modeling requests among cooperative IDSs and its application to Common Intrusion Detection Framework (CIDF). The third contribution is a novel approach to coordinating different IDSs for distributed event correlation.

---

---

Content:
Front Matter....Pages i-xix
Introduction....Pages 1-5
An Overview of Related Research....Pages 7-12
System View and Event History....Pages 13-18
Modeling Request Among Cooperating Intrusion Detection Systems....Pages 19-35
Extending Common Intrusion Detection Framework (CIDF) to Support Queries....Pages 37-54
A Hierarchical Model for Distributed Attacks....Pages 55-69
Decentralized Detection of Distributed Attacks....Pages 71-90
CARDS: An Experimental System for Detecting Distributed Attacks....Pages 91-109
Conclusion....Pages 111-112
Back Matter....Pages 113-136

---

Content:
Front Matter....Pages i-xix
Introduction....Pages 1-5
An Overview of Related Research....Pages 7-12
System View and Event History....Pages 13-18
Modeling Request Among Cooperating Intrusion Detection Systems....Pages 19-35
Extending Common Intrusion Detection Framework (CIDF) to Support Queries....Pages 37-54
A Hierarchical Model for Distributed Attacks....Pages 55-69
Decentralized Detection of Distributed Attacks....Pages 71-90
CARDS: An Experimental System for Detecting Distributed Attacks....Pages 91-109
Conclusion....Pages 111-112
Back Matter....Pages 113-136
....