Research Article

A Novel Algorithm for Intrusion Detection Based on RASL Model Checking

Table 1

The way of constructing models for attacks: behaviors and their RASL formulas.

Attack behaviorsRASL formulas defined for description of behaviors

means an atomic actionA state formula
means a phase in an attack
means an attack
is repeated times
is repeated times
Result of is ,
, where result of is
and are two ways of the attack
Time constraint between and is