Evaluating Reputation of Internet Entities - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2016

Evaluating Reputation of Internet Entities

Jan Kořenek
  • Fonction : Auteur
  • PersonId : 1022574

Résumé

Security monitoring tools, such as honeypots, IDS, behavioral analysis or anomaly detection systems, generate large amounts of security events or alerts. These alerts are often shared within some communities using various alert sharing systems. Our research is focused on analysis of the huge amount of data present in these systems. In this work we focus on summarizing all alerts and other information known about a network entity into a measure called reputation score expressing the level of threat the entity poses. Computation of the reputation score is based on estimating probability of future attacks caused by the entity.
Fichier principal
Vignette du fichier
385745_1_En_13_Chapter.pdf (154.36 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01632738 , version 1 (10-11-2017)

Licence

Identifiants

Citer

Václav Bartoš, Jan Kořenek. Evaluating Reputation of Internet Entities. 10th IFIP International Conference on Autonomous Infrastructure, Management and Security (AIMS), Jun 2016, Munich, Germany. pp.132-136, ⟨10.1007/978-3-319-39814-3_13⟩. ⟨hal-01632738⟩
84 Consultations
341 Téléchargements

Altmetric

Partager

More