Log-based Distributed Intrusion Detection for Hybrid Networks - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2008

Log-based Distributed Intrusion Detection for Hybrid Networks

Résumé

We propose a novel hybrid distributed security operation center which collects logs that are generated by any application, service, and protocol regardless of the layer of the protocol stack and the device (e.g., router); providing a global view of the supervised system based on which complex and distributed intrusions can be detected. Our HDSOC further (i) distributes its capabilities and (ii) provides extensive coordination capabilities for guarantying that both the network and the HDSOC components do not constitute isolated entities largely unaware of each others.
Fichier principal
Vignette du fichier
csiir08.pdf (81.19 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03031108 , version 1 (30-11-2020)

Identifiants

  • HAL Id : hal-03031108 , version 1

Citer

Francoise Sailhan, Julien Bourgeois. Log-based Distributed Intrusion Detection for Hybrid Networks. ACM Cyber Security and Information Intelligence Research Workshop (CSIIR), Oct 2008, s, France. ⟨hal-03031108⟩

Collections

UNIV-FCOMTE
29 Consultations
62 Téléchargements

Partager

Gmail Facebook X LinkedIn More