Title :
Plan recognition in intrusion detection systems
Author :
Geib, Christopher W. ; Goldman, Robert P.
Author_Institution :
Honeywell Lab., Minneapolis, MN, USA
Abstract :
To be effective, current intrusion detection systems (IDSs) must incorporate artificial intelligence methods for plan recognition. Plan recognition is critical both to predicting the future actions of attackers and planning appropriate responses to their actions. However network security places a new set of requirements on plan recognition. We present an argument for including plan recognition in IDSs and an algorithm for conducting plan recognition that meets the needs of the network security domain
Keywords :
computer network management; planning (artificial intelligence); security of data; supervisory programs; system monitoring; telecommunication security; artificial intelligence methods; attacker intent; computer network security; distributed coordination; intrusion detection systems; network security; plan recognition; Application software; Artificial intelligence; Computer hacking; Computer networks; Computer security; Intelligent agent; Intrusion detection; Protocols; Vents;
Conference_Titel :
DARPA Information Survivability Conference & Exposition II, 2001. DISCEX '01. Proceedings
Conference_Location :
Anaheim, CA
Print_ISBN :
0-7695-1212-7
DOI :
10.1109/DISCEX.2001.932191
