Intrusion detection using third-parties support

Masakazu Fujii, Kenichi Takahashi, Yoshiaki Hori, Kouichi Sakurai

研究成果: Contribution to conferencePaper

抜粋

Intrusions are one of the most important issues in the current Internet environment. Therefore, a lot of researchers and companies elaborated countermeasure techniques such as Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS). These systems detect intrusions and prevent attackers from succeeding in their intrusion attempts. They usually rely on pattern matching and therefore, work efficiently on known-attacks. However, they do not work efficiently on unknown-attacks such as zero-day attacks and targeted attacks. This means, we should assume that our machines can be corrupted anytime. Therefore, we should consider what we can do under this assumption for a next generation security framework. In this paper, we propose a new intrusion detection methodology using the support of other machines. In our proposal, when an attacker tries to attack other machines from a corrupted machine that the attacker has already intruded, other machines notify it to the administrator of the corrupted machine. Then, the attacker may lose the corrupted machine. Therefore, the attacker restrains itself from imprudently attacking other machines. This will suppress the propagation of corrupted machines in the Internet.

元の言語英語
ページ206-212
ページ数7
DOI
出版物ステータス出版済み - 2008
イベント12th IEEE International Workshop on Future Trends of Distributed Computing Systems, FTDCS 2008 - Kunming, 中国
継続期間: 10 21 200810 23 2008

その他

その他12th IEEE International Workshop on Future Trends of Distributed Computing Systems, FTDCS 2008
中国
Kunming
期間10/21/0810/23/08

All Science Journal Classification (ASJC) codes

  • Software
  • Hardware and Architecture
  • Computer Networks and Communications

フィンガープリント Intrusion detection using third-parties support' の研究トピックを掘り下げます。これらはともに一意のフィンガープリントを構成します。

  • これを引用

    Fujii, M., Takahashi, K., Hori, Y., & Sakurai, K. (2008). Intrusion detection using third-parties support. 206-212. 論文発表場所 12th IEEE International Workshop on Future Trends of Distributed Computing Systems, FTDCS 2008, Kunming, 中国. https://doi.org/10.1109/FTDCS.2008.32