Behavior-based model of detection and prevention of intrusions in computer networks

Authors:
Victor Serdiouk
Affiliations:
Department of Information Technologies, “MATI” – Russian State Technological University, Moscow, Russia
Venue:
MMM-ACNS'05 Proceedings of the Third international conference on Mathematical Methods, Models, and Architectures for Computer Network Security
Year:
2005

Citing 5
Cited 0

An Intrusion-Detection Model

IEEE Transactions on Software Engineering - Special issue on computer security and privacy
Towards a taxonomy of intrusion-detection systems

Computer Networks: The International Journal of Computer and Telecommunications Networking - Special issue on computer network security
Software vulnerability analysis

Software vulnerability analysis
Attacks against computer network: formal grammar-based framework and simulation tool

RAID'02 Proceedings of the 5th international conference on Recent advances in intrusion detection
Intrusion detection techniques and approaches

Computer Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

The paper describes a new intrusion detection and prevention model, which is based on state machine-based formal grammar. This behavior-based model allows to detect computer attacks by means of normal network traffic modeling. The parameters of such normal network traffic are presented in a formal grammar. Each data packet that violates these parameters is considered as a part of intrusion and blocked by network filters. The described model was implemented in Intrusion Detection and Prevention System “Forpost” and successfully tested in a complex network environment.