Correlation of intrusion symptoms: An application of chronicles

Benjamin Morin; Hervé Debar

doi:10.1007/978-3-540-45248-5_6

Correlation of intrusion symptoms: An application of chronicles

Benjamin Morin
, Hervé Debar

Orange Labs

Résultats de recherche: Le chapitre dans un livre, un rapport, une anthologie ou une collection › Chapitre › Revue par des pairs

Résumé

In this paper, we propose a multi-alarm misuse correlation component based on the chronicles formalism. Chronicles provide a high level declarative language and a recognition system that is used in other areas where dynamic systems are monitored. This formalism allows us to reduce the number of alarms shipped to the operator and enhances the quality of the diagnosis provided.

langue originale	Anglais
titre	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
rédacteurs en chef	Giovanni Vigna, Christopher Kruegel, Erland Jonsson, Christopher Kruegel
Editeur	Springer Verlag
Pages	94-112
Nombre de pages	19
ISBN (imprimé)	3540408789, 9783540408789
Les DOIs	https://doi.org/10.1007/978-3-540-45248-5_6
état	Publié - 1 janv. 2003
Modification externe	Oui

Série de publications

Nom	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	2820
ISSN (imprimé)	0302-9743
ISSN (Electronique)	1611-3349

Accès au document

10.1007/978-3-540-45248-5_6

Contient cette citation

Morin, B., & Debar, H. (2003). Correlation of intrusion symptoms: An application of chronicles. Dans G. Vigna, C. Kruegel, E. Jonsson, & C. Kruegel (eds.), Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) (p. 94-112). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol 2820). Springer Verlag. https://doi.org/10.1007/978-3-540-45248-5_6

Morin, Benjamin ; Debar, Hervé. / Correlation of intrusion symptoms : An application of chronicles. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). Editeur / Giovanni Vigna ; Christopher Kruegel ; Erland Jonsson ; Christopher Kruegel. Springer Verlag, 2003. p. 94-112 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inbook{8d2ee0aab1324c3fa781a964c8db9e7d,

title = "Correlation of intrusion symptoms: An application of chronicles",

abstract = "In this paper, we propose a multi-alarm misuse correlation component based on the chronicles formalism. Chronicles provide a high level declarative language and a recognition system that is used in other areas where dynamic systems are monitored. This formalism allows us to reduce the number of alarms shipped to the operator and enhances the quality of the diagnosis provided.",

author = "Benjamin Morin and Herv{\'e} Debar",

year = "2003",

month = jan,

day = "1",

doi = "10.1007/978-3-540-45248-5\_6",

language = "English",

isbn = "3540408789",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Verlag",

pages = "94--112",

editor = "Giovanni Vigna and Christopher Kruegel and Erland Jonsson and Christopher Kruegel",

booktitle = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

}

Morin, B & Debar, H 2003, Correlation of intrusion symptoms: An application of chronicles. Dans G Vigna, C Kruegel, E Jonsson & C Kruegel (eds), Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), VOL. 2820, Springer Verlag, p. 94-112. https://doi.org/10.1007/978-3-540-45248-5_6

Correlation of intrusion symptoms: An application of chronicles. / Morin, Benjamin; Debar, Hervé.
Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). Ed. / Giovanni Vigna; Christopher Kruegel; Erland Jonsson; Christopher Kruegel. Springer Verlag, 2003. p. 94-112 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol 2820).

Résultats de recherche: Le chapitre dans un livre, un rapport, une anthologie ou une collection › Chapitre › Revue par des pairs

TY - CHAP

T1 - Correlation of intrusion symptoms

T2 - An application of chronicles

AU - Morin, Benjamin

AU - Debar, Hervé

PY - 2003/1/1

Y1 - 2003/1/1

N2 - In this paper, we propose a multi-alarm misuse correlation component based on the chronicles formalism. Chronicles provide a high level declarative language and a recognition system that is used in other areas where dynamic systems are monitored. This formalism allows us to reduce the number of alarms shipped to the operator and enhances the quality of the diagnosis provided.

AB - In this paper, we propose a multi-alarm misuse correlation component based on the chronicles formalism. Chronicles provide a high level declarative language and a recognition system that is used in other areas where dynamic systems are monitored. This formalism allows us to reduce the number of alarms shipped to the operator and enhances the quality of the diagnosis provided.

U2 - 10.1007/978-3-540-45248-5_6

DO - 10.1007/978-3-540-45248-5_6

M3 - Chapter

AN - SCOPUS:33646160004

SN - 3540408789

SN - 9783540408789

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 94

EP - 112

BT - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

A2 - Vigna, Giovanni

A2 - Kruegel, Christopher

A2 - Jonsson, Erland

A2 - Kruegel, Christopher

PB - Springer Verlag

ER -

Morin B, Debar H. Correlation of intrusion symptoms: An application of chronicles. Dans Vigna G, Kruegel C, Jonsson E, Kruegel C, rédacteurs en chef, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). Springer Verlag. 2003. p. 94-112. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-540-45248-5_6

Correlation of intrusion symptoms: An application of chronicles

Résumé

Série de publications

Accès au document

Empreinte digitale

Contient cette citation