System and Security Management Tools

Curriculum corporation proposes to research and development an innovative platform independent intrusion detection and response tool. The tool would be based on DCE in order to support mainstream computer platform. The ability to automatically recover from an information attack will reply on 'on-the-fly' modification of the DCE security service. The tool is innovative in that the response to a security attack would be a concerted effort from all of the systems in a DCE cell (potentially thousands of systems). DCE provides some basic security building blocks but lacks the ability to automatically react to intrusion. The proposed research effort would design an infrastructure capable of reacting appropriately to a wide range of security anomalies and implementation of these responses. The centralized nature of the DCE security implementation will facilitate very fast response to any potential attack. The main goal of the proposed Phase I effort will be build upon the intrusion detection and response work done by others by augmentation and application to a DCE-based infrastructure. During I project, a prototype intrusion response tool will be developed using a combination of DCE executables and dcecp/TCL scripts.