Attacks prevention model using semantic correlation and multiagent systems

Author

Isaza, Gustavo ; Duque, Néstor ; Castillo, Luís ; López, Marcelo

Author_Institution

Dept. of Syst. & Inf., Caldas Univ., Caldas, Colombia

fYear

2011

fDate

4-6 May 2011

Firstpage

1

Lastpage

6

Abstract

The attacks detection and prevention problem could be improved using new intelligent techniques. This paper aims to define an ontology model for intrusion correlation over intelligent multiagent system. The semantic model describes attacks signatures, reaction rules, axioms with alerts communication and correlation. The proposed model optimizes the alerts correlation process providing the inference and reasoning to the ontology model.

Keywords

inference mechanisms; multi-agent systems; ontologies (artificial intelligence); security of data; attack axiom alert comunication; attack axiom alert correlation; attack detection; attack reaction rules; attack signatures; attacks prevention model; intrusion correlation model; multi-agent system; ontology inference; ontology model; ontology reasoning; semantic correlation; Computational modeling; Correlation; Intrusion detection; OWL; Ontologies; Semantics; XML; Alert Correlation; Intrusion Detection; Intrusion Prevention; Ontology; Semantic Attacks; Semantic IDS;

fLanguage

English

Publisher

ieee

Conference_Titel

Computing Congress (CCC), 2011 6th Colombian

Conference_Location

Manizales

Print_ISBN

978-1-4577-0285-3

Type

conf

DOI

10.1109/COLOMCC.2011.5936317

Filename

5936317