CISE Experimental Partnerships: Audit Trails: Content, Storage and Processing

CISE 实验合作伙伴：审核跟踪：内容、存储和处理

• 批准号: 9903545
• 负责人: Eugene Spafford
• 金额: $ 36.58万
• 依托单位: Purdue Research Foundation
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 1999
• 资助国家: 美国
• 起止时间: 1999-09-01 至 2003-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=9903545&HistoricalAwards=false
• 关键词: CISE; Experimental; Partnerships; Audit; Trails

99-03545Spafford, EugeneAtallah, MikhailPurdue UniversityCISE Experimental Partnerships: Audit Trails: Content, Storage and ProcessingThe main thrust of this research is the investigation of the interrelated issues of content, representation, storage and processing of audit trails in computer systems. Existing audit mechanisms on various systems are being analyzed and extended, experimental collection and reduction systems for audit are being built, and experimentation with tools to analyze audit data for intrusion and misuse are being performed. This research builds on ongoing work in which progress has been made on prototyping an audit representation and compression tool and developing two different intrusion detection techniques. An important benefit of this work is that undergraduate and graduate students involved are acquiring a unique combination of skills, spanning computer security, systems and modeling, and data structuring. The project leverages considerable industrial support and the results and prototyped software could be used by industry to enhance existing audit mechanisms and intrusion detection systems.

99-03545Spafford，Eugeneatallah，Mikhailpurdue Universitycise实验合作伙伴关系：审计跟踪：内容，存储和处理这项研究的主要力量是对计算机系统中内容，表示，存储和处理的相关问题的研究。 正在分析和扩展各种系统上的现有审计机制，正在构建实验收集和减少审计系统，并使用工具进行了分析审核数据的工具进行审核数据，以进行入侵和滥用。 这项研究以正在进行的工作为基础，在该工作中，在原型制定审计表示和压缩工具上取得了进展，并开发了两种不同的入侵检测技术。 这项工作的一个重要好处是，所涉及的本科生和研究生正在获得独特的技能组合，涵盖计算机安全，系统和建模以及数据结构。 该项目利用了可观的工业支持，并且可以使用行业的结果和原型软件来增强现有的审计机制和入侵检测系统。