System health and intrusion monitoring (SHIM): project summary

Author

Ko, Chun-Han

Author_Institution

Network Associates Laboratories

Volume

2

fYear

2003

fDate

22-24 April 2003

Firstpage

202

Abstract

Computer systems and networks today are vulnerable to attacks. In addition to preventive strategies, intrusion detection has been used to further improve the security of computers and networks. Nevertheless, current intrusion detection and response system can detect only known attacks and provide primitive responses. The System Health and Intrusion Monitoring (SHIM) project aims at developing techniques to monitor and assess the health of a large distributed system. SHIM can accurately detect novel attacks and provide strategic information for further correlation, assessments, and response management.

Keywords

distributed processing; security of data; system monitoring; SHIM project; System Health and Intrusion Monitoring; computer networks; computer system security; intrusion detection; large distributed system; novel attacks; preventive strategies; response management; response system; strategic information; Application software; Computer networks; Computer security; Computerized monitoring; Data security; Fault detection; Information security; Intrusion detection; Laboratories; System performance;

fLanguage

English

Publisher

ieee

Conference_Titel

DARPA Information Survivability Conference and Exposition, 2003. Proceedings

Print_ISBN

0-7695-1897-4

Type

conf

DOI

10.1109/DISCEX.2003.1194966

Filename

1194966