Using constraints for intrusion detection: the NeMODe system

Authors:
Pedro Salgueiro;Daniel Diaz;Isabel Brito;Salvador Abreu
Affiliations:
Departamento de Informática, Universidade de Évora and CENTRIA FCT, UNL, Portugal;University of Paris 1-Sorbonne, Paris, France;Departamento de Engenharia, Escola Superior de Tecnologia e Gestão, Instituto Politécnico de Beja, Portugal;Departamento de Informática, Universidade de Évora and CENTRIA FCT, UNL, Portugal
Venue:
PADL'11 Proceedings of the 13th international conference on Practical aspects of declarative languages
Year:
2011

Citing 9
Cited 1

Bro: a system for detecting network intruders in real-time

Computer Networks: The International Journal of Computer and Telecommunications Networking
Domain-specific languages: an annotated bibliography

ACM SIGPLAN Notices
Yet Another Local Search Method for Constraint Solving

SAGA '01 Proceedings of the International Symposium on Stochastic Algorithms: Foundations and Applications
Snort - Lightweight Intrusion Detection for Networks

LISA '99 Proceedings of the 13th USENIX conference on System administration
Constraint-Based Local Search

Constraint-Based Local Search
Handbook of Constraint Programming (Foundations of Artificial Intelligence)

Handbook of Constraint Programming (Foundations of Artificial Intelligence)
Regular Expression Matching on Graphics Hardware for Intrusion Detection

RAID '09 Proceedings of the 12th International Symposium on Recent Advances in Intrusion Detection
A DSL for intrusion detection based on constraint programming

Proceedings of the 3rd international conference on Security of information and networks
Network monitoring with constraint programming: preliminary specification and analysis

INAP'09 Proceedings of the 18th international conference on Applications of declarative programming and knowledge management

Modelling distributed network attacks with constraints

International Journal of Bio-Inspired Computation

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this work we present NeMODe a declarative system for Computer Network Intrusion detection which provides a declarative Domain Specific Language for describing computer network intrusion signatures that could spread across several network packets, which allows to state constraints over network packets, describing relations between several packets, and providing several back-end detection mechanisms which relies on Constraint Programming (CP) methodologies to find those intrusions.