O Sistema de Detecção de Intrusão Asgaard
Resumo
This paper describes a study being developed at the Security Group (Gseg-UFRGS), of the Federal University of Rio Grande do Sul, aimed to the creation of a mudular and decentralized intrusion detection system, called Asgaard, trying to fill the main gaps left for the current IDS. Its main characteristics and features are described, as well as its architectures and main modules.
Palavras-chave:
segurança, detecção de intrusão, confiabilidade
Referências
Roesch, M.: Snort: Lightweight Intrusion Detection for Networks. In: LISA, 13., november 1999. Proceedings... Seattle, 1999.
Asaka, M., Okazawa, S., Taguchi, A., Goto, S.: A Method of Tracing Intruders by Use of Mobile Agents. In; INET'99, June 1999. Proceedings... [S.l:s.n], 1999. (Disponível em http://www.ipa.go.jp:80/STC/IDA/paper/inet99.ps.gz)
Porras, P.A., Newmann, P.G.: EMERALD: Event monitoring enabling response to anomalous live disturbances. In: National Information Systems Security Conference (NISSC), 20., 1997, Baltimore. Proceedings... [Sl:s.n], 1997. (Disponível em http://www2.csl.sri.com/emerald/presentations/NISSC97/sld001.htm)
Lunt, T. F. et al.: A Real-Time Intrusion Detection Expert System (IDES). Menlo Park: Computer Science: Laboratory, SRI International, 1992. (Disponível em http://www2.csl.sri.com/nides.indexS.html)
Anderson, D., Frivold, T., Valdes, A.: Next-Generation Intrusion Detection Expert System (NIDES): A Summary. Menlo Park: Computer Science Laboratory, SRI International, 1995. (Disponível em http://www.sdl.sri.com/nides.index5.html)
Zamboni, D. et al.: An Architecture for Intrusion Detection Using Autonomous Agents. Technical Report 98/05. West Lafayette: COAST Laboratory, 1998. (Disponível em http://www.cs.purdue.edw/coast/projects/autonomous-agents.html)
Network Flight Recorder, Inc.: Step-by-Step Network Monitoring Using NFR [online]. NFR, 1998. (Disponível em [link]).
Cansian, A.: Desenvolvimento de um sistema adaptativo de detecção de intrusos em redes de computadores. São Carlos: USP, 1997.
Lee, W., Stolfo, S., Mok, K.: A data mining framework for building intrusion detection models. In: IEEE Symposium on Security and Privacy, 1997. Proceedings... [Sl:s.n], 1999.
Forrest, S., Hofmeyr, S.A., Somayaji, A.: Computer Immunology. Communications of the ACM, v. 40, n. 10, p. 80-96, October 1997. (Disponível em http://www.cs.unm.edu/~forrest/papers.html)
Schneier, B.: Applied Cryptography. 2 ed. John Willey & Sons, 1996.
Asaka, M., Okazawa, S., Taguchi, A., Goto, S.: A Method of Tracing Intruders by Use of Mobile Agents. In; INET'99, June 1999. Proceedings... [S.l:s.n], 1999. (Disponível em http://www.ipa.go.jp:80/STC/IDA/paper/inet99.ps.gz)
Porras, P.A., Newmann, P.G.: EMERALD: Event monitoring enabling response to anomalous live disturbances. In: National Information Systems Security Conference (NISSC), 20., 1997, Baltimore. Proceedings... [Sl:s.n], 1997. (Disponível em http://www2.csl.sri.com/emerald/presentations/NISSC97/sld001.htm)
Lunt, T. F. et al.: A Real-Time Intrusion Detection Expert System (IDES). Menlo Park: Computer Science: Laboratory, SRI International, 1992. (Disponível em http://www2.csl.sri.com/nides.indexS.html)
Anderson, D., Frivold, T., Valdes, A.: Next-Generation Intrusion Detection Expert System (NIDES): A Summary. Menlo Park: Computer Science Laboratory, SRI International, 1995. (Disponível em http://www.sdl.sri.com/nides.index5.html)
Zamboni, D. et al.: An Architecture for Intrusion Detection Using Autonomous Agents. Technical Report 98/05. West Lafayette: COAST Laboratory, 1998. (Disponível em http://www.cs.purdue.edw/coast/projects/autonomous-agents.html)
Network Flight Recorder, Inc.: Step-by-Step Network Monitoring Using NFR [online]. NFR, 1998. (Disponível em [link]).
Cansian, A.: Desenvolvimento de um sistema adaptativo de detecção de intrusos em redes de computadores. São Carlos: USP, 1997.
Lee, W., Stolfo, S., Mok, K.: A data mining framework for building intrusion detection models. In: IEEE Symposium on Security and Privacy, 1997. Proceedings... [Sl:s.n], 1999.
Forrest, S., Hofmeyr, S.A., Somayaji, A.: Computer Immunology. Communications of the ACM, v. 40, n. 10, p. 80-96, October 1997. (Disponível em http://www.cs.unm.edu/~forrest/papers.html)
Schneier, B.: Applied Cryptography. 2 ed. John Willey & Sons, 1996.
Publicado
05/03/2001
Como Citar
CAMPELLO, Rafael Saldanha; WEBER, Raul Fernando; SERAFIM, Vinicius da Silveira; RIBEIRO, Vinicius Gadis.
O Sistema de Detecção de Intrusão Asgaard. In: SIMPÓSIO BRASILEIRO DE SEGURANÇA DA INFORMAÇÃO E DE SISTEMAS COMPUTACIONAIS (SBSEG), 1. , 2001, Florianópolis.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2001
.
p. 62-68.
DOI: https://doi.org/10.5753/sbseg.2001.21287.
