JCS
2002
14 years 8 days ago
2002
STATL is an extensible state/transition-based attack description language designed to support intrusion detection. The language allows one to describe computer penetrations as seq...
ACSAC
2004
IEEE
14 years 4 months ago
2004
IEEE
Correlating and analyzing security alerts is a critical and challenging task in security management. Recently, some techniques have been proposed for security alert correlation. H...
ACSAC
2004
IEEE
14 years 4 months ago
2004
IEEE
We map intrusion events to known exploits in the network attack graph, and correlate the events through the corresponding attack graph distances. From this, we construct attack sc...
DISCEX
2003
IEEE
14 years 5 months ago
2003
IEEE
Efforts toward automated detection and identification of multistep cyber attack scenarios would benefit significantly from a methodology and language for modeling such scenario...
ESORICS
2004
Springer
14 years 6 months ago
2004
Springer
Abstract. Correlating security alerts and discovering attack strategies are important and challenging tasks for security analysts. Recently, there have been several proposed techni...