@inproceedings{edea9dd17d1d442d98bafe43a5cdf45d,
title = "Decentralized alerts correlation approach for DDoS intrusion detection",
abstract = "Availability is one of the main characteristics of internet security and hence attacks against networks increase trying to stop services on servers. Distributed denial of service attacks are very dangerous for computer networks and services availability. Various defense systems were proposed. Unfortunately, until now, there is no efficient solution. This paper presents a decentralized architecture for an intrusion detection approach. The central point of this paper is the alert correlation among Snort intrusion detection systems (IDS). We believe that this approach optimizes the detection performance in a completely distributed fashion by relying on Pastry overlay network as indexing and routing protocol. We propose novel approach that will be improved in the future work.",
author = "Rida Khatoun and Guillaume Doyen and Dominique Ga{\"i}ti and Radwane Saad and Ahmed Serhrouchni",
year = "2008",
month = dec,
day = "1",
doi = "10.1109/NTMS.2008.ECP.36",
language = "English",
isbn = "9782953244304",
series = "Proceedings of New Technologies, Mobility and Security Conference and Workshops, NTMS 2008",
booktitle = "Proceedings of New Technologies, Mobility and Security Conference and Workshops, NTMS 2008",
note = "New Technologies, Mobility and Security Conference and Workshops, NTMS 2008 ; Conference date: 05-11-2008 Through 07-11-2008",
}