Using Constraints for Intrusion Detection: the NeMODe System - Archive ouverte HAL Access content directly
Conference Papers Year : 2011

Using Constraints for Intrusion Detection: the NeMODe System

Abstract

In this work we present NeMODe a declarative system for Computer Network Intrusion detection which provides a declarative Domain Specific Language for describing computer network intrusion signatures that could spread across several network packets, which allows to state constraints over network packets, describing relations between several packets, and providing several back-end detection mechanisms which relies on Constraint Programming (CP) methodologies to find those intrusions.

Dates and versions

hal-00663805 , version 1 (27-01-2012)

Identifiers

Cite

Pedro Salgueiro, Daniel Diaz, Isabel Brito, Salvador Abreu. Using Constraints for Intrusion Detection: the NeMODe System. 13th International Symposium, PADL 2011, Jan 2011, Austin, Texas, United States. pp.115-129, ⟨10.1007/978-3-642-18378-2_11⟩. ⟨hal-00663805⟩
61 View
0 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More