Discovering Correlations: A Formal Definition of Causal Dependency Among Heterogeneous Events

Charles Xosanavongsa (1, 2) , Eric Totel (3, 4, 5) , Olivier Bettan (2)

1 CentraleSupélec
2 Thales Services
3 SUPELEC-Campus Rennes
4 CIDRE - Confidentialité, Intégrité, Disponibilité et Répartition
5 IMT Atlantique - SRCD - Département Systèmes Réseaux, Cybersécurité et Droit du numérique

Mots clés: alert and event correlation; distributed systems; forensic; causal dependencies; formal model; multi-step attack discovery

Domaines: Cryptographie et sécurité [cs.CR]

Charles Xosanavongsa, Eric Totel, Olivier Bettan. Discovering Correlations: A Formal Definition of Causal Dependency Among Heterogeneous Events. EuroS&P 2019 : 4th IEEE European Symposium on Security and Privacy, Jun 2019, Stockholm, Sweden. pp.340-355, ⟨10.1109/EuroSP.2019.00033⟩. ⟨hal-02363431⟩