Correlation and Tracking of Distributed IDS

Architecture and Background

Daniel Burroughs - Correlation and Tracking of Distributed IDS Standard approaches to intrusion detection and response attempt to detect and prevent individual attacks.

Vulnerability Analysis

However, it is not the attack but rather the attacker against which our networks must be defended To do this, the information that is being provided by intrusion detect systems (IDS) must be gathered and then divided into its component parts such that the activity of individual attackers is made clear.

Exploitation and Demonstrations

By applying techniques from radar tracking, information warfare, and multisensor data fusion to info gathered from distributed IDS, we hope to improve the capabilities for early detection of distributed/coordinated attacks against infrastructure and the detection of the preliminary phases of distributed denial of service attacks.

Remediation and Defensive Strategies

Daniel Burroughs is a research engineer and Ph.D. candidate at the Institute for Security Technology Studies at Dartmouth College. His areas of research have included mobile agents, distributed simulation, and distributed intrusion detection. He is also the head of engineering for SignalQuest, Inc., which specializes in the development of embedded sensors.