|
Design and Implementation of MAIDS (11101 words) |
 | The CPN for FTP bounce (as derived from the fault tree in [Helm01a]) captures the character of the attack as it applies to an RSH target; however there are variations on the FTP bounce that look slightly different [CERT:FTPB]. |
| A separate CPN need not be constructed for each variation on the attack; instead it is a simple task to write a stationary transition that monitors the "FTP bounce suspicion" place, making and distributing clones of its tokens to several other places as figure 15 illustrates. |
| CPNs with several transitions sharing one source place, as in figure 11, would perform better if a careful queuing mechanism or binary backoff scheme were implemented for locking places. |
Feeds |
Contact