2005 Symposium on Applications and the Internet (SAINT'05) Adaptive Access Policy for the Linux Kernel Trento, Italy January 31-February 04 ISBN: 0-7695-2262-9
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/SAINT.2005.11
SELinux, that has stricter access control mechanisms than traditional UNIX/Linux, is thought to be an effective solution for server-side fortification. Some of SELinux's behavior toward actual incidents shows its potential as an intrusion detection system (IDS), but, still, it is nothing more than a logging facility. Further improvements are needed for SELinux, not only to detect incidents but also to deal with them. This paper describes the autonomous defense functionality called "Linux Kernel based IDS" as well as its implementation.
Citation:
Takashi Horie, Toshiharu Harada, Kazuo Tanaka, "Adaptive Access Policy for the Linux Kernel," saint, pp.82-88, 2005 Symposium on Applications and the Internet (SAINT'05), 2005 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||