Design and implementation of a behavioral difference analyzer for network intrusion detection

Authors:
Mehran Nadjarbashi-Noghani;Ali A. Ghorbani
Affiliations:
University of New Brunswick, Fredericton, NB, Canada;University of New Brunswick, Fredericton, NB, Canada
Venue:
Proceedings of the 2006 International Conference on Privacy, Security and Trust: Bridge the Gap Between PST Technologies and Business Services
Year:
2006

Citing 3
Cited 0

Practical Byzantine fault tolerance

OSDI '99 Proceedings of the third symposium on Operating systems design and implementation
The Design and Implementation of an Intrusion Tolerant System

DSN '02 Proceedings of the 2002 International Conference on Dependable Systems and Networks
An approach to intrusion tolerance for mission-critical services using adaptability and diverse replication

Future Generation Computer Systems - Special issue: Modeling and simulation in supercomputing and telecommunications

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper discusses the use of diversity and redundancy techniques for network intrusion detection, and explains the design and implementation of a Behavioral Difference Analyzer to examine behavioral disparity of two heterogeneous network servers under normal and compromised conditions. The challenges of differential intrusion detection are explained, and solutions and algorithms for carrying out differential analysis are proposed.