• DocumentCode
    2415955
  • Title

    Experimenting with a policy-based HIDS based on an information flow control model

  • Author

    Zimmermann, Jacob ; Mé, Ludovic ; Bidan, Christophe

  • Author_Institution
    SUPELEC, France
  • fYear
    2003
  • fDate
    8-12 Dec. 2003
  • Firstpage
    364
  • Lastpage
    373
  • Abstract
    In 2002 we proposed a model for policy-based intrusion detection, based on information flow control. In the present paper, we show its applicability and effectiveness on a standard OS. We present results of two set of experiments, one carried out in a completely controlled environment, the other on an operational server with real network traffic. Our results show that the model fulfills its goals and serves as a successful runtime policy-based intrusion detector.
  • Keywords
    network operating systems; security of data; telecommunication security; information flow control; network traffic; policy-based intrusion detection; Communication system traffic control; Detectors; Electronic mail; Event detection; Information security; Intrusion detection; Jacobian matrices; Network servers; Runtime; Traffic control;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Computer Security Applications Conference, 2003. Proceedings. 19th Annual
  • Print_ISBN
    0-7695-2041-3
  • Type

    conf

  • DOI
    10.1109/CSAC.2003.1254341
  • Filename
    1254341