loading...
Distributed Exchange of Alerts for the Detection of Coordinated Attacks
May 05-May 08
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CNSR.2008.702008 Communication Networks and Servi ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Attacks and intrusions to information systems cause large revenue losses. The prevention of these attacks is not always possible by just considering information from isolated sources of the network. A global view of the whole system is necessary to react against the different actions of such an attack. The design and deployment of a decentralized system targeted at detecting as well as reacting to information system attacks might benefit from the use of the publish/subscribe model. In this paper, we discuss the advantages and convenience in using this communication paradigm for a general decentralized attack prevention framework and overview the design and implementation of our approach by using a combination of two different publish/subscribe middleware products. Furthermore, we present a quantitative evaluation of our approach.
Index Terms:
Network Security, Attack Prevention System, Publish/Subscribe, Message Oriented Middleware, IDMEF
Citation:
J. Garcia-Alfaro, M. A. Jaeger, G. M?, I. Barrera, J. Borrell, "Distributed Exchange of Alerts for the Detection of Coordinated Attacks," cnsr, pp.96-103, 2008 Communication Networks and Services Research Conference (CNSR 2008), 2008
Usage of this product signifies your acceptance of the Terms of Use.