Decentralized publish-subscribe system to prevent coordinated attacks via alert correlation - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2004

Decentralized publish-subscribe system to prevent coordinated attacks via alert correlation

Résumé

We present in this paper a decentralized architecture to correlate alerts between cooperative nodes in a secure multicast infrastructure. The purpose of this architecture is to detect and prevent the use of network resources to perform coordinated attacks against third party networks. By means of a cooperative scheme based on message passing, the different nodes of this system will collaborate to detect its participation on a coordinated attack and will react to avoid it. An overview of the implementation of this architecture for GNU/Linux systems will demonstrate the practicability of the system.
Fichier principal
Vignette du fichier
Garcia2004.pdf (183.16 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-00540841 , version 1 (28-03-2022)

Licence

Paternité - Pas d'utilisation commerciale

Identifiants

Citer

Joaquin Garcia Alfaro, Fabien Autrel, Joan Borrell, Sergio Castillo, Frédéric Cuppens, et al.. Decentralized publish-subscribe system to prevent coordinated attacks via alert correlation. ICICS 2004: 6th International Conference on Informa- tion and Communications Security, Oct 2004, Malaga, Spain. pp.223 - 235, ⟨10.1007/978-3-540-30191-2_18⟩. ⟨hal-00540841⟩
50 Consultations
37 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More