Decentralized event correlation for intrusion detection

DOI10.1007/3-540-45861-1_10MaRDI QIDQ4536644zbMATH OpenFDO

Authors Christopher Kruegel, Thomas Toth, Clemens Kerer

Publication date 25 June 2002

Published in Lecture Notes in Computer Science (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1007/3-540-45861-1_10

zbMATH Keywords

event correlationintrusion detection systemsnetwork securitypeer-to-peer algorithm

Mathematics Subject Classification ID

Network design and communication in computer systems (68M10) Data encryption (aspects in computer science) (68P25) Computing methodologies and applications (68U99) Cryptography (94A60)

Recommendations

• A decentralized approach for mining event correlations in distributed system monitoring
• Aggregation and correlation of intrusion-detection alerts
• Decentralized publish-subscribe system to prevent coordinated attacks via alert correlation

Cited in

(11)

• Intrusion detection in distributed systems. An abstraction-based approach.
• A decentralized approach for mining event correlations in distributed system monitoring
• Blind intrusion detection algorithm based on digital whiff
• Measuring false-positive by automated real-time correlated hacking behavior analysis
• Designing a web of highly-configurable intrusion detection sensors
• scientific article; zbMATH DE number 1912051 (Why is no real title available?)
• Intrusion detections in collaborative organizations by preserving privacy
• Automatic rule generation based on genetic programming for event correlation
• Decentralized publish-subscribe system to prevent coordinated attacks via alert correlation
• Communication mechanism designed for distributed intrusion detection system
• REFACING: An autonomic approach to network security based on multidimensional trustworthiness

This page was built for publication: Decentralized event correlation for intrusion detection

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q4536644)