SCENARIO-BASED THREAT DETECTION AND ATTACK ANALYSIS

Pi-Cheng Hsiu; Chin-Fu Kuo; Tei-Wei Kuo; Eric Y. T. Juan

doi:10.1109/ccst.2005.1594819

SCENARIO-BASED THREAT DETECTION AND ATTACK ANALYSIS

Pi-Cheng Hsiu
, Chin-Fu Kuo
, Tei-Wei Kuo
, Eric Y. T. Juan

Research output: Chapters, Conference Papers, Creative and Literary Works › RGC 32 - Refereed conference paper (with host publication) › peer-review

2 Citations (Scopus)

Abstract

This paper targets two essential issues in intrusion detection system designs: the optimization of rule selection and the attack discovery in attack analysis. A scenario-based approach is proposed to correlate malicious packets and to intelligently select intrusion detection rules to fire. We propose algorithms for rule selection and attack scenario identification. Potential threats and their relationship for a gateway and web-server applications are explored as an example in the study. The proposed algorithms are implemented over Snort, a signature-based intrusion detection system, for which we have some encouraging performance evaluation results.

Original language	English
Title of host publication	Proceedings - 39th Annual 2005 International Carnahan Conference on Security Technology
DOIs	https://doi.org/10.1109/ccst.2005.1594819
Publication status	Published - Oct 2005
Externally published	Yes
Event	39th Annual International Carnahan Conference on Security Technology (CCST'05) - Las Palmos, Spain Duration: 11 Oct 2005 → 14 Oct 2005

Publication series

Name	Proceedings - International Carnahan Conference on Security Technology
ISSN (Print)	1071-6572

Conference

Conference	39th Annual International Carnahan Conference on Security Technology (CCST'05)
Place	Spain
City	Las Palmos
Period	11/10/05 → 14/10/05

Access Output

10.1109/ccst.2005.1594819

Other Access Options

Check CityUHK Library

Permanent Link

Right click to copy link

Cite this

@inproceedings{4b825486cc95438394f6ee91dc8e0a7a,

title = "SCENARIO-BASED THREAT DETECTION AND ATTACK ANALYSIS",

abstract = "This paper targets two essential issues in intrusion detection system designs: the optimization of rule selection and the attack discovery in attack analysis. A scenario-based approach is proposed to correlate malicious packets and to intelligently select intrusion detection rules to fire. We propose algorithms for rule selection and attack scenario identification. Potential threats and their relationship for a gateway and web-server applications are explored as an example in the study. The proposed algorithms are implemented over Snort, a signature-based intrusion detection system, for which we have some encouraging performance evaluation results.",

author = "Pi-Cheng Hsiu and Chin-Fu Kuo and Tei-Wei Kuo and Juan, \{Eric Y. T.\}",

year = "2005",

month = oct,

doi = "10.1109/ccst.2005.1594819",

language = "English",

isbn = "0780392450",

series = "Proceedings - International Carnahan Conference on Security Technology",

booktitle = "Proceedings - 39th Annual 2005 International Carnahan Conference on Security Technology",

note = "39th Annual International Carnahan Conference on Security Technology (CCST'05) ; Conference date: 11-10-2005 Through 14-10-2005",

}

Hsiu, P-C, Kuo, C-F, Kuo, T-W & Juan, EYT 2005, SCENARIO-BASED THREAT DETECTION AND ATTACK ANALYSIS. in Proceedings - 39th Annual 2005 International Carnahan Conference on Security Technology., 1594819, Proceedings - International Carnahan Conference on Security Technology, 39th Annual International Carnahan Conference on Security Technology (CCST'05), Las Palmos, Spain, 11/10/05. https://doi.org/10.1109/ccst.2005.1594819

SCENARIO-BASED THREAT DETECTION AND ATTACK ANALYSIS. / Hsiu, Pi-Cheng; Kuo, Chin-Fu; Kuo, Tei-Wei et al.
Proceedings - 39th Annual 2005 International Carnahan Conference on Security Technology. 2005. 1594819 (Proceedings - International Carnahan Conference on Security Technology).

Research output: Chapters, Conference Papers, Creative and Literary Works › RGC 32 - Refereed conference paper (with host publication) › peer-review

TY - GEN

T1 - SCENARIO-BASED THREAT DETECTION AND ATTACK ANALYSIS

AU - Hsiu, Pi-Cheng

AU - Kuo, Chin-Fu

AU - Kuo, Tei-Wei

AU - Juan, Eric Y. T.

PY - 2005/10

Y1 - 2005/10

N2 - This paper targets two essential issues in intrusion detection system designs: the optimization of rule selection and the attack discovery in attack analysis. A scenario-based approach is proposed to correlate malicious packets and to intelligently select intrusion detection rules to fire. We propose algorithms for rule selection and attack scenario identification. Potential threats and their relationship for a gateway and web-server applications are explored as an example in the study. The proposed algorithms are implemented over Snort, a signature-based intrusion detection system, for which we have some encouraging performance evaluation results.

AB - This paper targets two essential issues in intrusion detection system designs: the optimization of rule selection and the attack discovery in attack analysis. A scenario-based approach is proposed to correlate malicious packets and to intelligently select intrusion detection rules to fire. We propose algorithms for rule selection and attack scenario identification. Potential threats and their relationship for a gateway and web-server applications are explored as an example in the study. The proposed algorithms are implemented over Snort, a signature-based intrusion detection system, for which we have some encouraging performance evaluation results.

UR - https://www.scopus.com/pages/publications/42749102330

UR - https://www.scopus.com/record/pubmetrics.uri?eid=2-s2.0-42749102330&origin=recordpage

U2 - 10.1109/ccst.2005.1594819

DO - 10.1109/ccst.2005.1594819

M3 - RGC 32 - Refereed conference paper (with host publication)

SN - 0780392450

SN - 9780780392458

T3 - Proceedings - International Carnahan Conference on Security Technology

BT - Proceedings - 39th Annual 2005 International Carnahan Conference on Security Technology

T2 - 39th Annual International Carnahan Conference on Security Technology (CCST'05)

Y2 - 11 October 2005 through 14 October 2005

ER -

SCENARIO-BASED THREAT DETECTION AND ATTACK ANALYSIS

Abstract

Publication series

Conference

Access Output

Other Access Options

Permanent Link

Other Files and Links

Fingerprint

Cite this