트래픽 분석을 통한 악성코드 감염PC 및 APT 공격탐지 방안

키워드

참고문헌 (20)

1. Elshoush, H. Tagelsir, "Alert correlation in collaborative intelligent intrusion detection systems - A survey" (2011), Applied Soft Computing In Press
2. K. Julisch, "Mining alarm clusters to improve alarm handling efficiency", Proceedings of the 17th Annual Conference on Computer Security Applications (2001)
3. S. Cheung, "Modeling multistep cyber attacks for scenario recognition", DARPA Information Survivability Conference and Exposition, pp.284~292 (2003)
4. H. Debar, "Aggregation and correlation of intrusion detection alerts", Proceedings of the International Symposium on Recent Advances in Intrusion Detection, pp, pp.85~103 (2001)
5. B. Morin, "M2D2: A formal data model for IDS alert correlation", Proc. Recent Advances in Intrusion Detection, 115(137), pp.115~137 (2002)
6. P. Ning, "Analyzing intensive intrusion alerts via correlation", Proceedings of the International Symposium on the Recent Advances in Intrusion Detection, pp.74~94 (2002)
7. P. Ning, "Constructing attack scenarios through correlation of intrusion alerts", Proc. ACM Conf. Computer and Comm. Security, pp.245~254 (2002)
8. F. Cuppens, "Managing alerts in a multi-intrusion detection environment", 17th Annual Computer Security Applications Conference (2001)
9. X. Qin, "Statistical causality of infosec alert data", Proceedings of Recent Advances in Intrusion Detection (2003)
10. W.L. Xinzhou Qin, "Statistical causality analysis of infosec alert data", Lecture Notes in Computer Science (2003)
11. A.Valdes, "Probabilistic alert correlation", RAID (2001)
12. O.Dain, "Building scenarios from a heterogeneous alert stream", IEEE Workshop on Information Assurance and Security (2001)
13. Munsun Shin, "Data mining based alarm data analysis implementation", KCC : database, 31(1) (2004)
14. F. Xiao, "A novel data mining-based method for alert reduction and analysis", Journal of Network, 5(1), pp.88~97 (2010)
15. An intrusion alert correlator based on prerequisites of intrusions, "Ning P", ~, pp.TR-2002-01 (2002)
16. S. Noel, "Correlating intrusion events and building attack scenarios through attack graph distance", Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC’04) (2004)
17. C. Abad, "Correlation between netFlow system and network views for intrusion detection in workshop on link analysis", Counter-terrorism, and Privacy held in conjunction with the SIAM International Conference on Data Mining (2004)
18. Suhyung Lee, "Security event processing for effective analysis", Electronics and Telecommunications Trends, 22(1) (2007)
19. "HBase-0.20.0 performance evaluation"[URL]
20. Internet packet size distributions: some observations, "Rishi Sinha", USC, 2007, Technical Report ISI-TR-2007-643

관련 논문AI추천