O Sistema de Detecção de Intrusão Asgaard

• Rafael Saldanha Campello UFRGS
• Raul Fernando Weber UFRGS
• Vinicius da Silveira Serafim UFRGS
• Vinicius Gadis Ribeiro UFRGS

DOI: https://doi.org/10.5753/sbseg.2001.21287

Resumo

This paper describes a study being developed at the Security Group (Gseg-UFRGS), of the Federal University of Rio Grande do Sul, aimed to the creation of a mudular and decentralized intrusion detection system, called Asgaard, trying to fill the main gaps left for the current IDS. Its main characteristics and features are described, as well as its architectures and main modules.

Referências

Roesch, M.: Snort: Lightweight Intrusion Detection for Networks. In: LISA, 13., november 1999. Proceedings... Seattle, 1999.

Asaka, M., Okazawa, S., Taguchi, A., Goto, S.: A Method of Tracing Intruders by Use of Mobile Agents. In; INET'99, June 1999. Proceedings... [S.l:s.n], 1999. (Disponível em http://www.ipa.go.jp:80/STC/IDA/paper/inet99.ps.gz)

Porras, P.A., Newmann, P.G.: EMERALD: Event monitoring enabling response to anomalous live disturbances. In: National Information Systems Security Conference (NISSC), 20., 1997, Baltimore. Proceedings... [Sl:s.n], 1997. (Disponível em http://www2.csl.sri.com/emerald/presentations/NISSC97/sld001.htm)

Lunt, T. F. et al.: A Real-Time Intrusion Detection Expert System (IDES). Menlo Park: Computer Science: Laboratory, SRI International, 1992. (Disponível em http://www2.csl.sri.com/nides.indexS.html)

Anderson, D., Frivold, T., Valdes, A.: Next-Generation Intrusion Detection Expert System (NIDES): A Summary. Menlo Park: Computer Science Laboratory, SRI International, 1995. (Disponível em http://www.sdl.sri.com/nides.index5.html)

Zamboni, D. et al.: An Architecture for Intrusion Detection Using Autonomous Agents. Technical Report 98/05. West Lafayette: COAST Laboratory, 1998. (Disponível em http://www.cs.purdue.edw/coast/projects/autonomous-agents.html)

Network Flight Recorder, Inc.: Step-by-Step Network Monitoring Using NFR [online]. NFR, 1998. (Disponível em [link]).

Cansian, A.: Desenvolvimento de um sistema adaptativo de detecção de intrusos em redes de computadores. São Carlos: USP, 1997.

Lee, W., Stolfo, S., Mok, K.: A data mining framework for building intrusion detection models. In: IEEE Symposium on Security and Privacy, 1997. Proceedings... [Sl:s.n], 1999.

Forrest, S., Hofmeyr, S.A., Somayaji, A.: Computer Immunology. Communications of the ACM, v. 40, n. 10, p. 80-96, October 1997. (Disponível em http://www.cs.unm.edu/~forrest/papers.html)

Schneier, B.: Applied Cryptography. 2 ed. John Willey & Sons, 1996.