Cooperating security managers : intrusion detection in a distributed environment /
Intrusions into computer systems and networks have become
| Main Author: | |
|---|---|
| Format: | Thesis Book |
| Language: | English |
| Published: |
[Place of publication not identified] :
[publisher not identified] ;
1995.
|
| Subjects: | |
| Online Access: | http://proxy.library.tamu.edu/login?url=http://proquest.umi.com/pqdweb?did=742535491&sid=1&Fmt=2&clientId=2945&RQT=309&VName=PQD |
| Summary: | Intrusions into computer systems and networks have become increasingly common as the level of connectivity of today's computer networks has increased. Methods used by these intruders range from simple techniques such as using maintenance passwords to the very sophisticated including manipulation of existing software packages to take advantage of little known security holes. Unfortunately, the techniques used to detect and track these intruders have not matched the pace set by the intruders themselves. This research concentrates on the development of a methodology to detect intrusions in computer systems connected in a distributed environment. Several methods have been tried to either simply detect intrusions into computer systems or to prevent such occurrences. These attempts have met with limited success. Many papers have been written on Intrusion Detection Systems (IDS) and Firewalls but problems still remain and intrusions still occur. The techniques used so far have been ineffective in countering the threat posed by the ever increasing sophistication and number of intruders that exist. One of the reasons for this is that these systems are only designed to work on single hosts or on small, local area networks. A method is needed to address the intrusion problem in larger networks and distributed environments. It is this need that is addressed by the Cooperating Security Managers (CSM). A CSM consists of a series of modules working together on a single host to detect intrusions on that host. In addition, several CSMs residing on separate hosts are designed to work together to detect intrusions in a networked or distributed environment. When an intrusion is detected, the CSMs are designed to take appropriate action to protect the hosts involved. The result of this research is a CSM designed to meet the goals of detecting intrusions and handling them in a networked environment. The CSM is developed and implemented in an UNIX environment. |
|---|---|
| Item Description: | Vita. "Major Subject: Computer Science". |
| Physical Description: | xi, 309 leaves : illustrations ; 28 cm. Issued also on microfiche from University Microfilms Inc. |
| Bibliography: | Includes bibliographical references. |