CS Colloquiumfor Giovanni Vigna 3/6/03
Stephanie Morris
Department of Computer Science
ECOT 717 Engineering Center
Campus Box 430
Boulder, Colorado 80309–0430
(303) 492–7514, FAX: (303) 492–2844
CS COLLOQUIUM
Designing a Web of Highly-Configurable Intrusion Detection Sensors
Giovanni Vigna
University of California, Santa Barbara
Thursday, March 6th, 2003
3:30 – 4:30 PM
Engineering Center Classroom 265
Refreshments will be served afterwards in ECOT 832
Intrusion detection relies on the information provided by a number of
sensors deployed throughout the monitored network infrastructure.
Sensors provide information at different abstraction levels and with
different semantics. In addition, sensors range from lightweight probes
and simple log parsers to complex software artifacts that perform
sophisticated analysis. Managing a configuration of heterogeneous
sensors can be a very time-consuming task. Management tasks include
planning, deployment, initial configuration, and run-time modifications.
This talk describes a new approach that leverages off the STAT model to
support a highly configurable sensing infrastructure. The approach
relies on a common sensor model, an explicit representation of sensor
component characteristics and dependencies, and a shared communication
and control infrastructure. The model allows an Intrusion Detection
Administrator to express high-level configuration requirements that are
mapped automatically to a detailed deployment and/or reconfiguration
plan. This approach supports automation of the administrator tasks and
better assurance of the effectiveness and consistency of the deployed
sensing infrastructure.
Giovanni Vigna is an Assistant Professor in the Department of Computer
Science at the University of California in Santa Barbara. His current
research interests include network and computer security, intrusion
detection systems, security of mobile code systems, penetration testing,
and distributed systems. He is Program Chair of the International
Symposium on Recent Advances in Intrusion Detection (RAID 2003).
Giovanni Vigna received his M.S. with honors and Ph.D. from Politecnico
di Milano, Italy, in 1994 and 1998, respectively. His Ph.D. research
focused on mobile code architectures and mobile code security issues. He
is a member of IEEE and ACM.
------------------------------
http://www.cs.colorado.edu/department/events/colloquia/colloquia.html
Sign Language Interpreters Available Upon Request. Please contact
Stephanie Morris, Department of Computer Science, Engineering ECOT 722,
303-492-6101, at least five days prior to the colloquium.
_______________________________________________
cscolloq mailing list
csco...@cs.colorado.edu
http://www.cs.colorado.edu/mailman/listinfo/cscolloq