A Declarative Framework for Intrusion Analysis英文资料.pdfVIP

Chapter 9 A Declarative Framework for Intrusion Analysis Matt Fredrikson, Mihai Christodorescu, Jonathon Giffin, and Somesh Jha Abstract We consider the problems of computer intrusion analysis and understanding. We begin by presenting a survey of the literature in this area and extrapolate a set of common principles and characteristics present in the most promising techniques. Using these principles, we develop a comprehensive analysis solution based on a variety of system events and the causal dependencies among them. We then present a declarative language that gives a system adminis