An efficient method to intrusion detection - IMT Atlantique Accéder directement au contenu
Communication Dans Un Congrès Année : 2003

An efficient method to intrusion detection

Résumé

This paper presents a new method in intrusion detection based on analyzing the audit trails of users' activities in a local area network. This approach consists of detecting the presence of known attacks in servers' audit sessions. Each attack scenario is described by a column vector containing the different occurrences of the system events that represent the attack. The detection procedure consists of examining the manifestation of the attack scenarios in the system event trace. This method could be applied to attacks on servers. The most advantages of the presented method are (1) it is easy to implement in any network having the audit mechanism, (2) it is very fast and may be used in real time and (3) it is robust.

Mots clés

Fichier non déposé

Dates et versions

hal-02128229 , version 1 (14-05-2019)

Identifiants

  • HAL Id : hal-02128229 , version 1

Citer

Yacine Bouzida, Sylvain Gombault. An efficient method to intrusion detection. SETIT'03, Conférence internationale Sciences électroniques, technologies de l'information et des télécommunications, Madhia, Tunisie, 17-21 mars, Mar 2003, Madhia, Tunisie. ⟨hal-02128229⟩
17 Consultations
0 Téléchargements

Partager

Gmail Facebook X LinkedIn More