LAMBDA: A Language to Model a Database for Detection of Attacks

By Frédéric Cuppens, Rodolphe Ortalo. International Symposium on Recent Advances in Intrusion Detection, 2000

388 citations recorded by the source corpus.

Subfields: Computer Networks and Communications, Information Systems, Signal Processing

View Paper: https://www.semanticscholar.org/paper/f4cf1a03424eec85fd6649617f26aaad72e34f72

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

1. Vinod Yegneswaran
2. Jeannette M. Wing
3. Shanika A. Karunasekera
4. Mireille Ducassé
5. Ludovic Mé
6. Benjamin Morin
7. Alexandre Miège
8. Chenfeng Vincent Zhou

In Information Systems

1. Jeannette M. Wing
2. Sushil Jajodia
3. Brian O'Berry
4. Steven Noel
5. Michael Jacobs
6. Alexandre Miège
7. Chenfeng Vincent Zhou
8. C. Leckie

In Signal Processing

1. Alexandre Miège
2. Chenfeng Vincent Zhou
3. Shanika A. Karunasekera
4. C. Leckie
5. Mireille Ducassé
6. Ludovic Mé
7. Benjamin Morin
8. Hervé Debar

Citations in the corpus

• A survey of coordinated attacks and collaborative intrusion detection (2010, methodology): “LAMBDA defines four components to describe attacks.”
• M2D2: A Formal Data Model for IDS Alert Correlation (2002, background): “Cuppens and Miège suggest in [16] to correlate alerts by using attack scenarios specified in the Lambda language [17].”
• Toward developing a systematic approach to generate benchmark datasets for intrusion detection (2012, background): “General-purpose languages are usually used to detail the steps of an attack; however, special-purpose languages (Arboi, 2005; Cuppens and Ortalo, 2000; Eckmann et al., 2002; Michel and Mé, 2001; Networks, 1999) have also been defined to support the scripting of attacks.”
• Alert correlation in a cooperative intrusion detection framework (2002, methodology): “Actually, our representation of attacks is based on the LAMBDA language [4].”
• Managing alerts in a multi-intrusion detection environment (2001, methodology): “This approach is based on the specification of attacks using LAMBDA [5].”
• Automated generation and analysis of attack graphs (2002, background): “Cuppens and Ortalo [7] propose a declarative language (LAMBDA) for specifying attacks in terms of pre- and postconditions.”
• Efficient minimum-cost network hardening via exploit dependency graphs (2003, background): “Also, there has been work that emphasizes the modeling rather than the analysis of attacks [16][17].”
• Global Intrusion Detection in the DOMINO Overlay System (2004, background): “Preserving hierarchical attributes towards the edges of the DOMINO overlay also facilitates efficient data aggregation, intelligent routing of queries and responses, establishment of trust levels and simplifies administrative demands.”