Sciweavers

Share
ESORICS
2003
Springer

An Improved Reference Flow Control Model for Policy-Based Intrusion Detection

10 years 1 months ago
An Improved Reference Flow Control Model for Policy-Based Intrusion Detection
In this paper, we describe a novel approach to policy-based intrusion detection. The model we propose checks legality of information flows between objects in the system, according to an existing security policy specification. These flows are generated by executed system operations. Illegal flows, i.e., not authorized by the security policy, are signaled and considered as intrusion symptoms. This model is able to detect a large class of attacks, referred to as “attacks by delegation” in this paper. Since the approach focuses really on attack effects instead of attack scenarii, unknown attacks by delegation can be detected.
Jacob Zimmermann, Ludovic Mé, Christophe Bi
Added 06 Jul 2010
Updated 06 Jul 2010
Type Conference
Year 2003
Where ESORICS
Authors Jacob Zimmermann, Ludovic Mé, Christophe Bidan
Comments (0)
books