DMCA
DIDS (Distributed Intrusion Detection System) - Motivation, Architecture, and An Early Prototype (1991)
| Venue: | In Proceedings of the 14th National Computer Security Conference |
| Citations: | 125 - 0 self |
BibTeX
@INPROCEEDINGS{Snapp91dids(distributed,
author = {Steven R. Snapp and James Brentano and Gihan V. Dias and Terrance L. Goan and L. Todd Heberlein and Che-lin Ho and Karl N. Levitt and Biswanath Mukherjee and Stephen E. Smaha and Tim Grance and Daniel M. Teal and Doug Mansur},
title = {DIDS (Distributed Intrusion Detection System) - Motivation, Architecture, and An Early Prototype},
booktitle = {In Proceedings of the 14th National Computer Security Conference},
year = {1991},
pages = {167--176}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Intrusion detection is the problem of identifying unauthorized use, misuse, and abuse of computer systems by both system insiders and external penetrators. The proliferation of heterogeneous computer networks provides additional implications for the intrusion detection problem. Namely, the increased connectivity of computer systems gives greater access to outsiders, and makes it easier for intruders to avoid detection. IDS's are based on the belief that an intruder's behavior will be noticeably different from that of a legitimate user. We are designing and implementing a prototype Distributed Intrusion Detection System (DIDS) that combines distributed monitoring and data reduction (through individual host and LAN monitors) with centralized data analysis (through the DIDS director) to monitor a heterogeneous network of computers. This approach is unique among current IDS's. A main problem considered in this paper is the Network -user Identification problem, which is concerned ...
Keyphrases
intrusion detection system early prototype computer system external penetrator additional implication individual host legitimate user intrusion detection heterogeneous computer network system insider data reduction unauthorized use intrusion detection problem network user identification problem data analysis lan monitor main problem heterogeneous network dids director current id increased connectivity
