🚀 go-pugleaf

University of Colorado at Boulder
Department of Computer Science
ECOT 717 Engineering Center
Campus Box 430
Boulder, Colorado 80309�0430
(303) 492�7514, FAX: (303) 492�2844

CS COLLOQUIUM

Designing a Web of Highly-Configurable Intrusion Detection Sensors
Giovanni Vigna
University of California, Santa Barbara

Thursday, March 6th, 2003
3:30 � 4:30 PM
Engineering Center Classroom 265

Refreshments will be served afterwards in ECOT 832

Intrusion detection relies on the information provided by a number of 
sensors deployed throughout the monitored network infrastructure. 
Sensors provide information at different abstraction levels and with 
different semantics. In addition, sensors range from lightweight probes 
and simple log parsers to complex software artifacts that perform 
sophisticated analysis. Managing a configuration of heterogeneous 
sensors can be a very time-consuming task. Management tasks include 
planning, deployment, initial configuration, and run-time modifications. 
This talk describes a new approach that leverages off the STAT model to 
support a highly configurable sensing infrastructure. The approach 
relies on a common sensor model, an explicit representation of sensor 
component characteristics and dependencies, and a shared communication 
and control infrastructure. The model allows an Intrusion Detection 
Administrator to express high-level configuration requirements that are 
mapped automatically to a detailed deployment and/or reconfiguration 
plan. This approach supports automation of the administrator tasks and 
better assurance of the effectiveness and consistency of the deployed 
sensing infrastructure.

Giovanni Vigna is an Assistant Professor in the Department of Computer 
Science at the University of California in Santa Barbara. His current 
research interests include network and computer security, intrusion 
detection systems, security of mobile code systems, penetration testing, 
and distributed systems. He is Program Chair of the International 
Symposium on Recent Advances in Intrusion Detection (RAID 2003). 
Giovanni Vigna received his M.S. with honors and Ph.D. from Politecnico 
di Milano, Italy, in 1994 and 1998, respectively. His Ph.D. research 
focused on mobile code architectures and mobile code security issues. He 
is a member of IEEE and ACM.

------------------------------
http://www.cs.colorado.edu/department/events/colloquia/colloquia.html

Sign Language Interpreters Available Upon Request.  Please contact 
Stephanie Morris, Department of Computer Science, Engineering  ECOT 722, 
303-492-6101, at least five days prior to the colloquium.

_______________________________________________
cscolloq mailing list
cscolloq@cs.colorado.edu
http://www.cs.colorado.edu/mailman/listinfo/cscolloq