Implementing the intrusion detection exchange protocol

Author

Buchheim, Tim ; Erlinger, Michael ; Feinstein, B. ; Matthews, Greg ; Pollock, Roy ; Betser, Joseph ; Walther, Andy

Author_Institution

Harvey Mudd Coll., Claremont, CA, USA

fYear

2001

fDate

10-14 Dec. 2001

Firstpage

32

Lastpage

41

Abstract

We describe the goals of the IETF´s Intrusion Detection Working Group (IDWG) and the requirements for a transport protocol to communicate among intrusion detection systems. We then describe the design and implementation of IAP the first attempt at such a protocol. After a discussion of IAP´s limitations, we discuss BEEP, a new IETF general framework for application protocols. We then describe the intrusion detection exchange protocol (IDXP), a transport protocol designed and implemented within the BEEP framework that fulfills the IDWG requirements for its transport protocol. We conclude by discussing probable future directions for this ongoing effort.

Keywords

Internet; authorisation; message authentication; transport protocols; BEEP framework; IAP; IDWG; IDXP; IETF; Intrusion Detection Working Group; application protocols; intrusion detection exchange protocol; intrusion detection systems; transport protocol; Aerospace engineering; Discussion forums; Educational institutions; Face detection; Information security; Internet; Intrusion detection; NASA; Standardization; Transport protocols;

fLanguage

English

Publisher

ieee

Conference_Titel

Computer Security Applications Conference, 2001. ACSAC 2001. Proceedings 17th Annual

Print_ISBN

0-7695-1405-7

Type

conf

DOI

10.1109/ACSAC.2001.991519

Filename

991519