Title
Global intrusion detection and tolerance in networked systems
Abstract
This paper presents an architecture for a global intrusion detection and tolerance such as global detection, global correlation, and intrusion tolerance. Global Intrusion Detection and Tolerance System (GIDTS). The cooperation proposed by the GIDTS solution allows the detection of complex attacks at their early stages. This cooperation is performed based on the output of several detection components located at different levels (wire network, wireless network, host, and disk). In addition, major detection and tolerance capabilities are protected against intruders attempts since they are performed by compromise independent components, located at the disk level. The GIDTS components implement different functions based on formal models proposed in this paper including, especially, alert correlation, storage requests, and tolerance strategy models. To enhance detection and tolerance capabilities, each GIDTS is assumed to cooperate with any other GIDTSs via a neighbor identification protocol. To illustrate GIDTS behavior, we propose an environment that integrates the flight management system, which represents a distributed application.
Year
DOI
Venue
2007
10.1145/1244002.1244051
SAC
Keywords
Field
DocType
tolerance strategy model,major detection,intrusion tolerance,tolerance capability,global intrusion detection,gidts solution,gidts behavior,networked system,detection component,gidts component,global detection,flight management system,wireless network,intrusion detection,distributed application
Wireless network,Host-based intrusion detection system,Computer science,Intrusion prevention system,Anomaly-based intrusion detection system,Real-time computing,Intrusion tolerance,Flight management system,Intrusion detection system,Alert correlation,Distributed computing
Conference
ISBN
Citations 
PageRank 
1-59593-480-4
0
0.34
References 
Authors
4
3
Name
Order
Citations
PageRank
Amel Meddeb177.81
Yacine Djemaiel2135.98
Noureddine Boudriga346094.23