{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,2]],"date-time":"2025-08-02T19:04:41Z","timestamp":1754161481780,"version":"3.41.2"},"reference-count":20,"publisher":"Emerald","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2006,8,1]]},"abstract":"<jats:sec>\n                  <jats:title>Purpose<\/jats:title>\n                  <jats:p>This paper introduces a solution for employing intrusion detection technology across organisational boundaries by using knowledge grid technology.<\/jats:p>\n               <\/jats:sec>\n               <jats:sec>\n                  <jats:title>Design\/methodology\/approach<\/jats:title>\n                  <jats:p>Employment of intrusion detection technology is currently limited to inside organisation deployments. By setting up communities, which maintain trust relationships between network nodes anywhere in the internet, security event data, structured into a common XML-based format, can be exchanged in a secure and reliable manner.<\/jats:p>\n               <\/jats:sec>\n               <jats:sec>\n                  <jats:title>Findings<\/jats:title>\n                  <jats:p>A modular architecture has been developed which provides functionality to integrate different audit data generating applications and share knowledge about incidents, vulnerabilities and countermeasures from all over the internet. A security policy, based on the Chinese Wall Security Policy, ensures the protection of information inserted into the network.<\/jats:p>\n               <\/jats:sec>\n               <jats:sec>\n                  <jats:title>Research limitations\/implications<\/jats:title>\n                  <jats:p>The solution is currently in a preliminary stage, providing the description of the design only. Implementation as well as evaluation is under development.<\/jats:p>\n               <\/jats:sec>\n               <jats:sec>\n                  <jats:title>Practical implications<\/jats:title>\n                  <jats:p>Trusting communities everywhere in the internet will be brought into being so that people may establish trust relationships between each other. Participants may decide themselves whom they trust as a source for security-related information rather than depending on centralised approaches.<\/jats:p>\n               <\/jats:sec>\n               <jats:sec>\n                  <jats:title>Originality\/value<\/jats:title>\n                  <jats:p>No approach is known combining the two technologies \u2013 intrusion detection and grid \u2013 as described in this paper. The decentralised, peer-to-peer based grid approach together with the introduction of trust relationships and communities results in a new way of thinking about distributing security audit data.<\/jats:p>\n               <\/jats:sec>","DOI":"10.1108\/09685220610690808","type":"journal-article","created":{"date-parts":[[2006,9,26]],"date-time":"2006-09-26T05:16:43Z","timestamp":1159247803000},"page":"327-342","source":"Crossref","is-referenced-by-count":3,"title":["Inter-organisational intrusion detection using knowledge grid technology"],"prefix":"10.1108","volume":"14","author":[{"given":"Michael","family":"Pilgermann","sequence":"first","affiliation":[{"name":"University of Glamorgan, Pontypridd, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrew","family":"Blyth","sequence":"additional","affiliation":[{"name":"University of Glamorgan, Pontypridd, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stilianos","family":"Vidalis","sequence":"additional","affiliation":[{"name":"University of Glamorgan, Pontypridd, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"140","reference":[{"issue":"2","key":"2025072819443874000_b1","article-title":"Unifying security data from various heterogeneous distribute systems into a single database architecture","volume":"1","author":"Avourdiadis","year":"2005","journal-title":"The Journal of Information System Security (JISSec)"},{"key":"2025072819443874000_b2","unstructured":"Balasubramaniyan, J.S.\n           and Garcia-Fernandez, J.O.\u2008et al. (1998), \u201cAn architecture for intrusion detection using autonomous agents\u201d, ACSAC."},{"key":"2025072819443874000_b3","unstructured":"Curry, D.\n           and Debar, H.\u2008et al. (2002), Intrusion Detection Message Exchange Format Data Model and Extensible Markup Language (XML) Document Type Definition, IETF.2003."},{"issue":"2","key":"2025072819443874000_b4","doi-asserted-by":"crossref","DOI":"10.1109\/TSE.1987.232894","article-title":"An intrusion detection model","volume":"SE-13","author":"Denning","year":"1987","journal-title":"IEEE Trans. on Software Engineering"},{"key":"2025072819443874000_b5","unstructured":"Foster, I.\n           and Berry, D.\u2008et al. (2004a), The Open Grid Services Architecture, Version 1.0. 2004."},{"key":"2025072819443874000_b6","unstructured":"Foster, I.\n           and Frey, J.\u2008et al. (2004b), Modeling Stateful Resources with Web Services."},{"key":"2025072819443874000_b7","unstructured":"Fyodor, Y.\n           (2000), Snortnet \u2013 A Distributed Intrusion Detection System. 2004."},{"key":"2025072819443874000_b8","doi-asserted-by":"crossref","unstructured":"Hedrick, C.L.\n           (1988), RFC 1058: Routing Information Protocol. 2005.","DOI":"10.17487\/rfc1058"},{"issue":"5","key":"2025072819443874000_b9","doi-asserted-by":"crossref","first-page":"233","DOI":"10.1108\/09685220110408031","article-title":"Security and trust management in supply chains","volume":"9","author":"Kolluru","year":"2001","journal-title":"Information Management & Computer Security"},{"key":"2025072819443874000_b10","doi-asserted-by":"crossref","unstructured":"Lee, W.\n           and Nimbalkar, A.\u2008et al. (2000), A Data Mining and CIDF Based Approach for Detecting Novel and Distributed Intrusions, Recent Advantages in Intrusion Detection, Toulouse, France, Department of Computer Science (North Carolina State University), Department of Computer Science (Columbia University).","DOI":"10.1007\/3-540-39945-3_4"},{"key":"2025072819443874000_b11","unstructured":"Morakis, E.\n           and Vidalis, S.\u2008et al. (2003), \u201cA framework for representing and analysing cyber attacks using object oriented hierarchy trees\u201d, paper presented at The 2nd European Conference On Information Warfare And Security (ECIW), Reading."},{"key":"2025072819443874000_b12","unstructured":"Piscitello, D.M.\n           and Chapin, A.L. (1993), Open Systems Networking: TCP\/IP and OSI, Addison-Wesley Longman, Glen View, IL."},{"key":"2025072819443874000_b13","unstructured":"Prelude\n           (2004), Prelude: An Open Source, Hybrid Intrusion Detection System."},{"key":"2025072819443874000_b14","unstructured":"Quin, X.\n           and Lee, W. (2003), Statistical Causality Analysis of INFOSEC Alert Data, Recent Advances in Intrusion Detection (RAID), Pittsburgh, PA."},{"key":"2025072819443874000_b15","unstructured":"Rhee, M.Y.\n           (2003), Internet Security \u2013 Cryptographic Principles, Algorithms and Protocols, Wiley, Chichester."},{"key":"2025072819443874000_b16","unstructured":"SETI\n           (2005), SETI at Home."},{"key":"2025072819443874000_b17","unstructured":"Snapp, S.\n           and Brentano, J.\u2008et al. (1991a), A System for Distributed Intrusion Detection, COMPCON Spring, San Francisco, CA."},{"key":"2025072819443874000_b18","unstructured":"Snapp, S.R.\n           and Brentano, J.\u2008et al. (1991b), \u201cDIDS (distributed intrusion detection system) motivation, architecture, and an early prototype\u201d, paper presented at 14th National Computer Security Conference, Washington, DC."},{"key":"2025072819443874000_b19","unstructured":"Stevens, W.R.\n           (1994), \u201cTCP\/IP illustrated\u201d, The Protocols,Vol. 1, Addison-Wesley, Reading, MA."},{"key":"2025072819443874000_b20","unstructured":"Wright, G.R.\n           and Stevens, W.R. (1995), \u201cTCP\/IP illustrated\u201d, The Implementation,Vol. 2, Addison-Wesley, Reading, MA."}],"container-title":["Information Management &amp; Computer Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/www.emeraldinsight.com\/doi\/full-xml\/10.1108\/09685220610690808","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/09685220610690808\/full\/xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.emerald.com\/ics\/article-pdf\/14\/4\/327\/1203864\/09685220610690808.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/www.emerald.com\/ics\/article-pdf\/14\/4\/327\/1203864\/09685220610690808.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,28]],"date-time":"2025-07-28T23:44:48Z","timestamp":1753746288000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.emerald.com\/ics\/article\/14\/4\/327\/176978\/Inter-organisational-intrusion-detection-using"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,8,1]]},"references-count":20,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2006,8,1]]}},"URL":"https:\/\/doi.org\/10.1108\/09685220610690808","relation":{},"ISSN":["0968-5227","1758-5805"],"issn-type":[{"type":"print","value":"0968-5227"},{"type":"electronic","value":"1758-5805"}],"subject":[],"published":{"date-parts":[[2006,8,1]]}}}