DMCA
State Transition Analysis: A Rule-Based Intrusion Detection Approach (1995)
Cached
Download Links
- [ftp.csl.sri.com]
- [www.cs.ucsb.edu]
- [www.itoc.usma.edu]
- DBLP
Other Repositories/Bibliography
| Venue: | IEEE Transactions on Software Engineering |
| Citations: | 347 - 19 self |
BibTeX
@ARTICLE{Ilgun95statetransition,
author = {Koral Ilgun and Richard A. Kemmerer and Phillip A. Porras},
title = {State Transition Analysis: A Rule-Based Intrusion Detection Approach},
journal = {IEEE Transactions on Software Engineering},
year = {1995},
volume = {21},
pages = {181--199}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
This paper presents a new approach to representing and detecting computer penetrations in real-time. The approach, called state transition analysis, models penetrations as a series of state changes that lead from an initial secure state to a target compromised state. State transition diagrams, the graphical representation of penetrations, identify precisely the requirements for and the compromise of a penetration and present only the critical events that must occur for the successful completion of the penetration. State transition diagrams are written to correspond to the states of an actual computer system, and these diagrams form the basis of a rule-based expert system for detecting penetrations, called the State Transition Analysis Tool (STAT). The design and implementation of a UNIX-specific prototype of this expert system, called USTAT, is also presented. This prototype provides a further illustration of the overall design and functionality of this intrusion detection approach. La...
Keyphrases
state transition analysis rule-based intrusion detection approach state transition diagram state change expert system graphical representation actual computer system initial secure state state transition analysis tool computer penetration model penetration new approach rule-based expert system overall design intrusion detection approach successful completion unix-specific prototype critical event
