Aggregation and Correlation of Intrusion-Detection Alerts (2001)
Cached
Download Links
- [perso.rd.francetelecom.fr]
- [www-static.cc.gatech.edu]
- [www.cc.gatech.edu]
- DBLP
Other Repositories/Bibliography
by
Hervé Debar
,
Andreas Wespi
| Venue: | In Recent Advances in Intrusion Detection, LNCS 2212 |
| Citations: | 100 - 4 self |
BibTeX
@INPROCEEDINGS{Debar01aggregationand,
author = {Hervé Debar and Andreas Wespi},
title = {Aggregation and Correlation of Intrusion-Detection Alerts},
booktitle = {In Recent Advances in Intrusion Detection, LNCS 2212},
year = {2001},
pages = {85--103},
publisher = {Springer-Verlag}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
Abstract. This paper describes an aggregation and correlation algorithm used in the design and implementation of an intrusion-detection console built on top of the Tivoli Enterprise Console (TEC). The aggregation and correlation algorithm aims at acquiring intrusion-detection alerts and relating them together to expose a more condensed view of the security issues raised by intrusion-detection systems.
Citations
| 62 | TCP WRAPPER: Network monitoring, access control, and booby traps. Paper presented at the 3rd UNIX Security Symposium - Venema - 1992 |
| 25 | A revised taxonomy for intrusiondetection systems - Debar, Dacier, et al. - 1999 |
| 24 | A lightweight tool for detecting web server attacks - Almgren, Debar, et al. - 2000 |
| 1 | Tec rules: Planning for efficiency - Bey - 1999 |
| 1 | Tivoli SecureWay Risk Manager, User’s Guide, Version 3.7 - Systems - 2000 |
