Intrusion Detection in Distributed Systems

By Peng Ning

Subjects: Computer networks, security measures, Computer crimes, Data structures (Computer science), Computer Communication Networks, Data transmission systems, Data encryption (Computer science), Computer network architectures, Computer science, Computers, access control

Description: Intrusion Detection In Distributed Systems: An Abstraction-Based Approach presents research contributions in three areas with respect to intrusion detection in distributed systems. The first contribution is an abstraction-based approach to addressing heterogeneity and autonomy of distributed environments. The second contribution is a formal framework for modeling requests among cooperative IDSs and its application to Common Intrusion Detection Framework (CIDF). The third contribution is a novel approach to coordinating different IDSs for distributed event correlation.