• DocumentCode
    3219034
  • Title

    Plan recognition in intrusion detection systems

  • Author

    Geib, Christopher W. ; Goldman, Robert P.

  • Author_Institution
    Honeywell Lab., Minneapolis, MN, USA
  • Volume
    1
  • fYear
    2001
  • fDate
    2001
  • Firstpage
    46
  • Abstract
    To be effective, current intrusion detection systems (IDSs) must incorporate artificial intelligence methods for plan recognition. Plan recognition is critical both to predicting the future actions of attackers and planning appropriate responses to their actions. However network security places a new set of requirements on plan recognition. We present an argument for including plan recognition in IDSs and an algorithm for conducting plan recognition that meets the needs of the network security domain
  • Keywords
    computer network management; planning (artificial intelligence); security of data; supervisory programs; system monitoring; telecommunication security; artificial intelligence methods; attacker intent; computer network security; distributed coordination; intrusion detection systems; network security; plan recognition; Application software; Artificial intelligence; Computer hacking; Computer networks; Computer security; Intelligent agent; Intrusion detection; Protocols; Vents;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    DARPA Information Survivability Conference & Exposition II, 2001. DISCEX '01. Proceedings
  • Conference_Location
    Anaheim, CA
  • Print_ISBN
    0-7695-1212-7
  • Type

    conf

  • DOI
    10.1109/DISCEX.2001.932191
  • Filename
    932191