通过分布式警报交换防止协同攻击
Preventing Coordinated Attacks Via Distributed Alert Exchange
摘要：
对信息系统的攻击和随后的入侵可能会造成巨大的收入损失。仅仅考虑来自网络孤立来源的信息并不总是能够预防这两种情况。要识别这种攻击的不同行动并作出反应，就必须对整个系统有一个全局的看法。通过发布/订阅中间件实现的松耦合，可以使分散式系统的设计和部署受益，该分散式系统的目标是检测和响应信息系统攻击。在本文中，我们提出了使用这种通信模式的一般分散的攻击预防框架的优点和方便。此外，我们提出了我们的方法的设计和实现现有的发布/订阅中间件的基础上，并评估我们的方法为GNU/Linux系统。
英文摘要：
Attacks on information systems followed by intrusions may cause large revenue losses. The prevention of both is not always possible by just considering information from isolated sources of the network. A global view of the whole system is necessary to recognize and react to the different actions of such an attack. The design and deployment of a decentralized system targeted at detecting as well as reacting to information system attacks might benefit from the loose coupling realized by publish/subscribe middleware. In this paper, we present the advantages and convenience in using this communication paradigm for a general decentralized attack prevention framework. Furthermore, we present the design and implementation of our approach based on existing publish/subscribe middleware and evaluate our approach for GNU/Linux systems.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
