This chapter addresses the problem of interoperability among intrusion detection systems. It presents a classification and a brief description of intrusion detection systems, taking into account several issues such as information sources, analysis of intrusion detection systems, response options for intrusion detection systems, analysis timing, control strategy, and architecture of intrusion detection systems. It is also discussed the problem of information exchange among intrusion detection systems, being addressed the intrusion detection exchange protocol and a format for the exchange of information among intrusion detection systems, called by intrusion detection message exchange format. The lack of a format of the answers or countermeasures interchanged between the components of intrusion detection systems is also discussed as well as some future trends in this area.
Complete Chapter List
Peter F. Linington
Djamel Khadraoui, Francine Herrmann
Michéle Germain, Alexis Ferrero, Jouni Karvo
Jean-Henry Morin, Michel Pawlak
Francine Herrmann, Djamel Khadraoui
Fredrik Vraalsen, Tobias Mahler