A new distributed IDS based on CVSS framework

Julien Aussibal (1) , Laurent Gallon (1)

1 LIUPPA - Laboratoire Informatique de l'Université de Pau et des Pays de l'Adour

The objective of this paper is to describe a new distributed Intrusion Detection System (IDS) based on CVSS framework. This new platform uses a wide set of classical IDS and detection entities. This distributed IDS aims to improve the discovery of anomalies by reducing the rate of false positives and false negatives. Entities correlate the different alerts emitted by local probes. The severity of anomalies is evaluated by using a cumulative score of alerts scores.

Mots clés: distributed IDS; CVSS framework

Domaines: Cryptographie et sécurité [cs.CR]

Julien Aussibal, Laurent Gallon. A new distributed IDS based on CVSS framework. Fourth International Conference on signal_image technology and Internet based systems (SITIS 2008), Nov 2008, Bali, Indonesia. ⟨hal-00349397⟩