Observatorio de I+D+i UPM

Memorias de investigación
Research Publications in journals:
Use of ontologies for the definition of alerts and policies in a network security platform
Year:2009
Research Areas
  • Telematics
Information
Abstract
A quick and efficient reaction to an attack is important to address the evolution of security incidents in current communication networks. The ReD (Reaction after Detection) project¿s aim is to design solutions that enhance the detection/reaction security process. This will improve the overall resilience of IP networks to attacks, helping telecommunication and service providers to maintain sufficient quality of service to comply with service level agreements. A main component within this project is in charge of instantiating new security policies that counteract the network attacks. This paper proposes an ontologybased methodology for the instantiation of these security policies. This approach provides a way to map alerts into attack contexts, which are later used to identify the policies to be applied in the network to solve the threat. For this, ontologies to describe alerts and policies are defined, using inference rules to perform such mappings. These ontologies are semantic representations of IDMEF alerts and ORBAC policies. Finally, this approach is applied in a Voice over IP use case, illustrating the mapping process.
International
Si
JCR
No
Title
Journal of Networks
ISBN
1796-2056
Impact factor JCR
0
Impact info
Volume
4
Journal number
8
From page
720
To page
733
Month
OCTUBRE
Ranking
Participants
  • Autor: Antony Martin (Alcatel-Lucent Bell Labs)
  • Autor: Marie-Noëlle Lepareux (Thales Communications)
  • Autor: Samuel Dubus (Alcatel-Lucent Bell Labs)
  • Autor: Enrique Vazquez Gallo (UPM)
  • Autor: Jorge Enrique Lopez de Vergara (UAM)
Research Group, Departaments and Institutes related
  • Creador: Grupo de Investigación: Redes y Servicios de Telecomunicación e Internet
  • Departamento: Ingeniería de Sistemas Telemáticos
S2i 2020 Observatorio de investigación @ UPM con la colaboración del Consejo Social UPM
Cofinanciación del MINECO en el marco del Programa INNCIDE 2011 (OTR-2011-0236)
Cofinanciación del MINECO en el marco del Programa INNPACTO (IPT-020000-2010-22)