Study of intrusion detection based on ECA rule

Xiufeng Gao; Changzhen Hu

Study of intrusion detection based on ECA rule

Xiufeng Gao^*
, Changzhen Hu

^*此作品的通讯作者

网络空间安全学院

Beijing Institute of Technology

科研成果: 期刊稿件 › 文章 › 同行评审

摘要

Currently, the intrusion detection system only analyzes system signature or events resulted by intrusion behavior. But it ignores the conjunction among intrusion events and the relation between intrusion event and system state. The ECA rules are applied to IDS in this paper. When dynamic characteristic and static characteristic are analyzed at the same time, the capability of IDS is greatly improved.

源语言	英语
页（从-至）	132-134
页数	3
期刊	Jisuanji Gongcheng/Computer Engineering
卷	31
期	16
出版状态	已出版 - 20 8月 2005

其它文件与链接

链接到 Scopus 的出版物

引用此

@article{0c2a370b8a6a443d86787233b03fcd86,

title = "Study of intrusion detection based on ECA rule",

abstract = "Currently, the intrusion detection system only analyzes system signature or events resulted by intrusion behavior. But it ignores the conjunction among intrusion events and the relation between intrusion event and system state. The ECA rules are applied to IDS in this paper. When dynamic characteristic and static characteristic are analyzed at the same time, the capability of IDS is greatly improved.",

keywords = "ECA rule, Intrusion detection, Intrusion events",

author = "Xiufeng Gao and Changzhen Hu",

year = "2005",

month = aug,

day = "20",

language = "English",

volume = "31",

pages = "132--134",

journal = "Jisuanji Gongcheng/Computer Engineering",

issn = "1000-3428",

publisher = "Shanghai Jisuanji Xuehui/Shanghai Computer Society",

number = "16",

}

TY - JOUR

T1 - Study of intrusion detection based on ECA rule

AU - Gao, Xiufeng

AU - Hu, Changzhen

PY - 2005/8/20

Y1 - 2005/8/20

N2 - Currently, the intrusion detection system only analyzes system signature or events resulted by intrusion behavior. But it ignores the conjunction among intrusion events and the relation between intrusion event and system state. The ECA rules are applied to IDS in this paper. When dynamic characteristic and static characteristic are analyzed at the same time, the capability of IDS is greatly improved.

AB - Currently, the intrusion detection system only analyzes system signature or events resulted by intrusion behavior. But it ignores the conjunction among intrusion events and the relation between intrusion event and system state. The ECA rules are applied to IDS in this paper. When dynamic characteristic and static characteristic are analyzed at the same time, the capability of IDS is greatly improved.

KW - ECA rule

KW - Intrusion detection

KW - Intrusion events

UR - https://www.scopus.com/pages/publications/24344455213

M3 - Article

AN - SCOPUS:24344455213

SN - 1000-3428

VL - 31

SP - 132

EP - 134

JO - Jisuanji Gongcheng/Computer Engineering

JF - Jisuanji Gongcheng/Computer Engineering

IS - 16

ER -

Study of intrusion detection based on ECA rule

摘要

其它文件与链接

学术指纹

引用此