DECIDUOUS: decentralized source identification for network-based intrusions

摘要: DECIDUOUS is a security management framework for identifying the sources of network-based intrusions. The first key concept in dynamic associations, which efficiently and collectively provide location information attack sources. built on top IETF's IPSEC/ISAKMP infrastructure, it does not introduce any new network protocol source identification single administrative domain. It defines collaborative inter-domain identification. second integration intrusion detection system (IDS) (ASIS) across different layers. For example, DECIDUOUS, possible network-layer control (e.g., IPSEC) to collaborate with an application-layer module IDS SNMP engine). In this paper, we present motivations, design, prototype implementation framework.