Rapid Prototyping of Intrusion Detection Systems - Archive ouverte HAL
Communication Dans Un Congrès Année : 2007

Rapid Prototyping of Intrusion Detection Systems

Fabrice Kordon
Jean-Baptiste Voron
  • Fonction : Auteur
  • PersonId : 968352
Liviu Iftode
  • Fonction : Auteur

Résumé

Designing security softwares that evolve as quickly as threats is a truthful challenge. In addition, current software becomes increasingly more complex and difficult to handle even for security experts. Intrusion Detection Softwares (IDS) represent a solution that can alleviate these concerns. This paper proposes a framework to automatically build an effective online IDS which can check if the program's expected behavior is respected during the execution. The proposed framework extracts relevant information from the program's source code to build a dedicated IDS. We use the GCC compiler to produce the structure of our behavior's model and ensure the IDS is correct. Thanks to Petri nets, our framework allows program offline monitoring and simplifies the online monitoring development.
Fichier non déposé

Dates et versions

hal-01335149 , version 1 (21-06-2016)

Identifiants

Citer

Fabrice Kordon, Jean-Baptiste Voron, Liviu Iftode. Rapid Prototyping of Intrusion Detection Systems. 18th International Workshop on Rapid System Prototyping (RSP), May 2007, Porto Alegre, Brazil. pp.89-98, ⟨10.1109/RSP.2007.34⟩. ⟨hal-01335149⟩
57 Consultations
0 Téléchargements

Altmetric

Partager

More