DMCA
A Software Fault Tree Approach to Requirements Analysis of an Intrusion Detection System (2002)
Cached
Download Links
| Venue: | Requirements Engineering Journal |
| Citations: | 43 - 8 self |
BibTeX
@INPROCEEDINGS{Helmer02asoftware,
author = {Guy Helmer and Johnny Wong and Mark Slagell and Vasant Honavar and Les Miller and Lutz Ý},
title = {A Software Fault Tree Approach to Requirements Analysis of an Intrusion Detection System},
booktitle = {Requirements Engineering Journal},
year = {2002},
pages = {207--220},
publisher = {Springer}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
The use of software fault trees for requirements identification and analysis in an Intrusion Detection System (IDS) is described. Intrusions are divided into seven stages, following Ruiu, and a fault subtree is developed to model each stage (e.g., reconnaissance, penetration, etc.). The software fault tree approach supports requirements evolution as new intrusions are identified as well as prioritized, incremental development of the distributed IDS. The IDS under development is a collection of mobile agents that detect, classify, and correlate system and network activities. Analysis of the software fault trees and the minimum cut sets identify the software requirements. These derived requirements include what activities are to be monitored in the agent software, what intrusion characteristics the agents should correlate, where the IDS agents are to be placed to feasibly detect the intrusions, and what countermeasures the software should take. Two examples of intrusions demonstrate how the
Keyphrases
intrusion detection system software fault tree approach requirement analysis software fault tree requirement identification distributed id software requirement id agent new intrusion correlate system requirement evolution incremental development mobile agent fault subtree derived requirement minimum cut set agent software network activity
