@inproceedings{576169c3f6ba4e599c44926438adef51,
title = "Distributed exchange of alerts for the detection of coordinated attacks",
abstract = "Attacks and intrusions to information systems cause large revenue losses. The prevention of these attacks is not always possible by just considering information from isolated sources of the network. A global view of the whole system is necessary to react against the different actions of such an attack. The design and deployment of a decentralized system targeted at detecting as well as reacting to information system attacks might benefit from the use of the publish/subscribe model. In this paper, we discuss the advantages and convenience in using this communication paradigm for a general decentralized attack prevention framework and overview the design and implementation of our approach by using a combination of two different publish/subscribe middleware products. Furthermore, we present a quantitative evaluation of our approach.",
keywords = "Attack prevention system, IDMEF, Message oriented middleware, Network security, Publish/subscribe",
author = "J. Garcia-Alfaro and Jaeger, \{M. A.\} and G. M{\"u}hl and I. Barrera and J. Borrell",
year = "2008",
month = aug,
day = "22",
doi = "10.1109/CNSR.2008.70",
language = "English",
isbn = "9780769531359",
series = "Proceedings of the 6th Annual Communication Networks and Services Research Conference, CNSR 2008",
pages = "96--103",
booktitle = "Proceedings of the 6th Annual Communication Networks and Services Research Coference, CNSR 2008",
note = "6th Annual Communication Networks and Services Research Conference, CNSR 2008 ; Conference date: 05-05-2008 Through 08-05-2008",
}