requires - (continued)

e.g.

concept Linux5.1-IMAP_buffer_overflow

requires

Host_Info: HI #- domain knowledge

Linux_5.1_IMAP_attach_detected: L51IMAP #- subscribed report

…

e.g.

concept IIS_List_Overflow_Attack

requires

Host_Info: HI #- domain knowledge

IIS_List_Overflow_Detected: IISLOD #- subscribed report

IIS_Access: IISA #- subscribed report

…

e.g.

concept RSH_connection_spoof

requires

Trusted_Partner: TP #- subscribed report

Network_DOS: ND #- subscribed report

SeqNumProbe: SNP #- subscribed report

SpoofedPacketSend: SPS #- subscribed report

…

Previous slide

Next slide

Back to first slide

View graphic version