Abstract
In this paper a concept and an architecture of the Federated Networks Protection System (FNPS) is proposed. The system components are described and, particularly, the Decision Module (FNPS-DM) is discussed. The major contributions of the paper are: concept of federated networks security, the proposition of the network events correlation approach and semantic notations aimed at detecting complex cyber attacks and 0-day exploits. Moreover P2P based communication between federated networks is proposed.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Enabling and managing end-to-end resilience, ENISA (European Network and Information Security Agency) Report (January 2011)
Choraś, M., D’Antonio, S., Kozik, R., Holubowicz, W.: INTERSECTION Approach to Vulnerability Handling. In: Proc. of WEBIST 2010, vol.1, 171–174. INSTICC Press, Valencia (2010)
NATO Network Enabled Feasibility Study Volume II: Detailed Report Covering a Strategy and Roadmap for Realizing an NNEC Networking and Information Infrastructure (NII), version 2.0
El-Damhougy, H., Yousefizadeh, H., Lofquist, D., Sackman, R., Crowley, J.: Hierarchical and federated network management for tactical environments. In: Proc. of IEEE Military Communications Conference MILCOM, vol. 4, pp. 2062–2067 (2005)
Calo, S., Wood, D., Zerfos, P., Vyvyan, D., Dantressangle, P., Bent, G.: Technologies for Federation and Interoperation of Coalition Networks. In: Proc. of 12th International Conference on Information Fusion, Seattle (2009)
Coppolino, L., D’Antonio, L., Esposito, M., Romano, L.: Exploiting diversity and correlation to improve the performance of intrusion detection systems. In: Proc. of IFIP/IEEE International Conference on Network and Service (2009)
SNORT project homepage: http://www.snort.org/
Choraś, M., Saganowski, L., Renk, R., Holubowicz, W.: Statistical and signal-based network traffic recognition for anomaly detection. Expert Systems (Early View) (2011), doi: 10.1111/j.1468-0394.2010.00576.x
ARAKIS project homepage: http://www.arakis.pl
HSN project homepage: http://www.honeyspider.net/
Borealis project homepage: http://www.cs.brown.edu/research/borealis/public/
CLIPS project homepage: http://clipsrules.sourceforge.net/
Neches, R., Fikes, R., Finin, T., Gruber, T., Patil, R., Senator, T., Swartout, W.R.: Enabling Technology for Knowledge Sharing. AI Magazine 2(3), s.36–s.56 (1991)
OWL Web Ontology Language Semantics and Abstract Syntax (June 2006), http://www.w3.org/TR/owl-features/
SWRL: A Semantic Web Rule Language Combning OWL and RuleML, W3C Member Submission, http://www.w3.org/Submission/SWRL/
OWASP Top Ten -2010. The Ten Most Critical Web Application Security Risks. Published by Open Web Application Security Project, OWASP (2010)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2011 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Choraś, M., Kozik, R., Piotrowski, R., Brzostek, J., Hołubowicz, W. (2011). Network Events Correlation for Federated Networks Protection System. In: Abramowicz, W., Llorente, I.M., Surridge, M., Zisman, A., Vayssière, J. (eds) Towards a Service-Based Internet. ServiceWave 2011. Lecture Notes in Computer Science, vol 6994. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-24755-2_9
Download citation
DOI: https://doi.org/10.1007/978-3-642-24755-2_9
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-24754-5
Online ISBN: 978-3-642-24755-2
eBook Packages: Computer ScienceComputer Science (R0)