ACM TechNews

New Predictive Approach Seeks to Stay Ahead of Hackers

EE Times (01/11/08) Riley, Sheila

Military and academic researchers from the Rochester Institute of Technology, the University of Buffalo, Pennsylvania State University, and the U.S. Air Force are working on CUBRIC, an intrusion prediction project that uses mathematical models and algorithms to predict a hacker's probable moves after having penetrated a network. "We want to be one step ahead of them and predict what they are going to do," says RIT computer engineering professor Shanchieh Jay Yang. "When they first get in, we try to observe what they are doing, and use that information to forecast their probable future actions." The goal of CUBRIC is to provide information on how an intruder will react to particular network defenses and architectures so that administrators can lessen damage and better protect their systems. Intrusion prediction modeling is meant to be a part of a larger network protection plan and is designed to defend against the different tactics used by network intruders, such as interrupting service or stealing data. CUBRIC is capable of following individual attackers, or tracking multiple attackers, and will have both commercial and military applications.

http://www.eetimes.com/showArticle.jhtml?articleID=205602814

---

© Copyright 2008 Information, Inc. This service may be reproduced for internal distribution.