Data-Driven Field Mapping of Security Logs for Integrated Monitoring-Reference-Cited by-同舟云学术

Data-Driven Field Mapping of Security Logs for Integrated Monitoring

Published:2019 Issue: Volume: Page:253-268
ISSN:1868-4238
Container-title:IFIP Advances in Information and Communication Technology
language:
Short-container-title:

Author:

Choi Seungoh,Kim Yesol,Yun Jeong-Han,Min Byung-Gil,Kim Hyoung-Chun

Publisher

Springer International Publishing

Link

http://link.springer.com/content/pdf/10.1007/978-3-030-34647-8_13

Reference12 articles.

1. ArcSight, Common Event Format, Revision 15, ArcSight Technical Note, Cupertino, California, 2009

2. J. Caballero, P. Poosankam, C. Kreibich and D. Song, Dispatcher: Enabling active botnet infiltration using automatic protocol reverse-engineering, Proceedings of the Sixteenth ACM Conference on Computer and Communications Security, pp. 621–364, 2009

3. J. Caballero and D. Song, Automatic protocol reverse-engineering: Message format extraction and field semantics inference, Computer Networks, vol. 57(2), pp. 451–474, 2013

4. J. Caballero, H. Yin, Z. Liang and D. Song, Polyglot: Automatic extraction of protocol message format using dynamic binary analysis, Proceedings of the Fourteenth ACM Conference on Computer and Communications Security, pp. 317–329, 2007

5. Cisco Systems, Cisco Intrusion Detection Event Exchange (CIDEE) Specification, San Jose, California ( www.cisco.com/c/en/us/td/docs/security/ips/specs/CIDEE_Specification.html ), 2009

Cited by 1 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Vendor-Independent Monitoring on Programmable Logic Controller Status for ICS Security Log Management;Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security;2019-07-02