A PATTERN MATCHING MODEL FOR MISUSE INTRUSION DETECTION

by Sandeep Kumar , Eugene H. Spafford

Citations:

123 - 4 self

User correction supplied by mph

Datum	Value	Source
TITLE	A PATTERN MATCHING MODEL FOR MISUSE INTRUSION DETECTION	user correction
AUTHOR NAME	Sandeep Kumar	user correction
AUTHOR NAME	Eugene H. Spafford	user correction
AUTHOR AFFIL	The COAST Project; Department of Computer Sciences; Purdue University	user correction
AUTHOR ADDR	West Lafayette, IN 47907{1398	user correction
ABSTRACT	This paper describes a generic model of matching that can be usefully applied to misuse intrusion detection. The model is based on Colored Petri Nets. Guards define the context in which signatures are matched. The notion of start and final states, and paths between them define the set of event sequences matched by the net. Partial order matching can also be specified in this model. The main benefits of the model are its generality, portability and flexibility.	user correction
CITATIONS	23 found	ParsCit 1.0