3 search results - page 1 / 1 » Correlating Intrusion Events and Building Attack Scenarios T... |
ACSAC
2004
IEEE
13 years 8 months ago
2004
IEEE
We map intrusion events to known exploits in the network attack graph, and correlate the events through the corresponding attack graph distances. From this, we construct attack sc...
NDSS
2005
IEEE
13 years 10 months ago
2005
IEEE
Current intrusion detection systems point out suspicious states or events but do not show how the suspicious state or events relate to other states or events in the system. We sho...
ACSAC
2004
IEEE
13 years 8 months ago
2004
IEEE
Complementary security systems are widely deployed in networks to protect digital assets. Alert correlation is essential to understanding the security threats and taking appropria...