http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-2.xsd
intrusion detection in a distributed environment
Intrusions into computer systems and networks have become
increasingly common as the level of connectivity of today's
computer networks has increased. Methods used by these
intruders range from simple techniques such as using
maintenance passwords to the very sophisticated including
manipulation of existing software packages to take advantage
of little known security holes. Unfortunately, the
techniques used to detect and track these intruders have not
matched the pace set by the intruders themselves. This
research concentrates on the development of a methodology to
detect intrusions in computer systems connected in a
distributed environment. Several methods have been tried to
either simply detect intrusions into computer systems or to
prevent such occurrences. These attempts have met with
limited success. Many papers have been written on Intrusion
Detection Systems (IDS) and Firewalls but problems still
remain and intrusions still occur. The techniques used so
far have been ineffective in countering the threat posed by
the ever increasing sophistication and number of intruders
that exist. One of the reasons for this is that these
systems are only designed to work on single hosts or on
small, local area networks. A method is needed to address
the intrusion problem in larger networks and distributed
environments. It is this need that is addressed by the
Cooperating Security Managers (CSM). A CSM consists of a
series of modules working together on a single host to detect
intrusions on that host. In addition, several CSMs residing
on separate hosts are designed to work together to detect
intrusions in a networked or distributed environment. When
an intrusion is detected, the CSMs are designed to take
appropriate action to protect the hosts involved. The result
of this research is a CSM designed to meet the goals of
detecting intrusions and handling them in a networked
environment. The CSM is developed and implemented in an UNIX
Issued also on microfiche from University Microfilms Inc.