Table of Contents
Building Survivable Information Systems: The Survivable Active Networks Project
Project Goal
Building a Survivable System Some Design Assumptions
Major Project Activities
Specification Based Detection and Response
Approach Overview
Our Approach: Detection Engine Creation
Example Specifications
Example Packet Specifications
Our Approach: DE Operation
Effectiveness of SDE+PDE on CERT Data
Intrusion Detection Evaluation
PDE Attack Repertoire
Evaluation Results: Summary
Effectiveness on Network-Level Attacks
PDE Performance
Network-wide Isolation and Tracing
Approach
SAN/PLAN Experiment
SAN/PLAN Sample Scenario
Preliminary Observations
Technology Transfer Opportunities
Future Plans
Contact Information
|