Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection network - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Annals of Telecommunications - annales des télécommunications Année : 2006

Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection network

L’Anti-Corrélation Comme Critère de Sélection de Contre-Mesures dans le Contexte de la Détection D’Intrusion

Résumé

Since current computer infrastructures are increasingly vulnerable to malicious activities, intrusion detection is necessary but unfortunately not sufficient. We need to design effective response techniques to circumvent intrusions when they are detected. Our approach is based on a library that implements different types of countermeasures. The idea is to design a decision support tool to help the administrator to choose, in this library, the appropriate countermeasure when a given intrusion occurs. For this purpose, we formally define the notion of anti-correlation which is used to determine the countermeasures that are effective to stop the intrusion. Finally, we present a platform of intrusion detection that implements the response mechanisms presented in this paper.
Fichier principal
Vignette du fichier
annales06-JGA.pdf (1.83 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03646855 , version 1 (20-04-2022)

Identifiants

Citer

Frédéric Cuppens, Fabien Autrel, Yacine Bouzida, Joaquin Garcia‐alfaro, Sylvain Gombault, et al.. Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection network. Annals of Telecommunications - annales des télécommunications, 2006, 61 (1-2), pp.197-217. ⟨10.1007/BF03219974⟩. ⟨hal-03646855⟩
22 Consultations
153 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More