Method for detecting sophisticated cyber attacks

Details Method for detecting sophisticated cyber attacks Method for detecting sophisticated cyber attacks

2005-05-23

2008-11-18

Barron, Jr., Gilberto (Department: 2132)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

Reexamination Certificate

active

07454790

ABSTRACT:
A method of analyzing computer intrusion detection information that looks beyond known attacks and abnormal access patterns to the critical information that an intruder may want to access. Unique target identifiers and type of work performed by the networked targets is added to audit log records. Analysis using vector space modeling, dissimilarity matrix comparison, and clustering of the event records is then performed.

REFERENCES:
patent: 6134664 (2000-10-01), Walker
patent: 7017186 (2006-03-01), Day
patent: 7143442 (2006-11-01), Scarfe et al.
patent: 2003/0120639 (2003-06-01), Potok et al.
patent: 2003/0236652 (2003-12-01), Scherrer et al.
patent: 2004/0024864 (2004-02-01), Porras et al.
Liao et al., “Using Text Categorization Techniques for Intrusion Detection”, USENIX, Aug. 2002, Retrieved from the Internet on Sep. 19, 2008: <URL: http://www.usenix.org/publications/library/proceedings/sec02/full—papers/liao/liao.pdf>.
Tolle et al., “Supporting Intrusion Detection by Graph Clustering and Graph Drawing”, 2000, Retrieved from the Internet on Sep. 19, 2008: <URL: http://www.raid-symposium.org/raid2000/Materials/Abstracts/22/22.pdf>.
Wang et al., “A Clustering Algorithm for Intrusion Detection”, Apr. 2005, Retrieved from the Internet on Sep. 19, 2008: <URL: http://spiedl.aip.org/getabs/servlet/GetabsServlet?prog=normal&id=PSISDG005812000001000031000001&idtype=cvips>.
S.K.M. Wong, et al., “On Modeling of Information Retrieval Concepts in Vector Spaces,” ACM Transactions on Database Systems, 1987, pp. 299-321, vol. 12, No. 2.
A.K. Jain, et al., “Data Clustering: A Review,” ACM Computing Surveys, 1999, pp. 264-323, vol. 31, No. 3.

Affiliated with

Also associated with

Rating

Method for detecting sophisticated cyber attacks does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method for detecting sophisticated cyber attacks, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method for detecting sophisticated cyber attacks will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4023715