Using Constraints for Intrusion Detection: The NeMODe System

Loading...
Thumbnail Image

Date

2011-01

Journal Title

Journal ISSN

Volume Title

Publisher

Springer

Abstract

In this work we present NeMODe a declarative system for Computer Network Intrusion detection which provides a declarative Do- main Specific Language for describing computer network intrusion signa- tures that could spread across several network packets, which allows to state constraints over network packets, describing relations between sev- eral packets, and providing several back-end detection mechanisms which relies on Constraint Programming (CP) methodologies to find those in- trusions.

Description

Keywords

Intrusion Detection, Constraint Programming, Domain-Specific Languages

Citation

Pedro Salgueiro and Daniel Diaz and Isabel Brito and Salvador Abreu, Using Constraints for Intrusion Detection: The NeMODe System, , Practical Aspects of Declarative Languages (PADL 2011), LNCS, Springer, Vol. 6539, Pag. 115-129, 2011.

Endorsement

Review

Supplemented By

Referenced By