A Semantic Approach to Situational Awareness for Intrusion Detection

dc.contributor.authorMore, Sumit
dc.contributor.authorMathews, M. Lisa
dc.contributor.authorJoshi, Anupam
dc.contributor.authorFinin, Tim
dc.date.accessioned2018-11-05T17:05:55Z
dc.date.available2018-11-05T17:05:55Z
dc.date.issued2012-06-11
dc.description.abstractWe describe a situation-aware intrusion detection system that integrates heterogeneous sources of information to build and maintain a semantically rich knowledge-base about cyber threats and vulnerabilities. Most current intrusion detection and prevention systems rely on signature-based approaches to detect attacks. When an attack signature is not available, such as for a new exploit or a significantly modified known one, such systems are much less effective. Moreover, these intrusion detection systems are point-based solutions which do not make effective use of heterogeneous data sources, which can provide important information related to intrusions which are not yet available as signature patterns. This information can also help detect low-and-slow attacks in which small intrusions that are spatially and temporally apart combine to build a more elaborate attack.en_US
dc.description.urihttps://ebiquity.umbc.edu/paper/html/id/594/A-Semantic-Approach-to-Situational-Awareness-for-Intrusion-Detectionen_US
dc.format.extent1 pageen_US
dc.genrepostersen_US
dc.identifierdoi:10.13016/M2M61BT50
dc.identifier.citationSumit More, M. Lisa Mathews, Anupam Joshi, and Tim Finin, A Semantic Approach to Situational Awareness for Intrusion Detection, Proceedings of the National Symposium on Moving Target Research, June 2012.en_US
dc.identifier.urihttp://hdl.handle.net/11603/11865
dc.language.isoen_USen_US
dc.publisherNational Coordination Office for Networking and Information Technology Research and Developmenten_US
dc.relation.isAvailableAtThe University of Maryland, Baltimore County (UMBC)
dc.relation.ispartofUMBC Computer Science and Electrical Engineering Department Collection
dc.relation.ispartofUMBC Faculty Collection
dc.rightsThis item is likely protected under Title 17 of the U.S. Copyright Law. Unless on a Creative Commons license, for uses protected by Copyright Law, contact the copyright holder or the author.
dc.subjectcybersecurityen_US
dc.subjectintrusion detectionen_US
dc.subjectSemanticen_US
dc.subjectUMBC Ebiquity Research Groupen_US
dc.titleA Semantic Approach to Situational Awareness for Intrusion Detectionen_US
dc.typeTexten_US

Files

Original bundle
Now showing 1 - 1 of 1
Loading...
Thumbnail Image
Name:
643.pd.pdf
Size:
74.76 KB
Format:
Adobe Portable Document Format
Description:
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.68 KB
Format:
Item-specific license agreed upon to submission
Description: