We have been working on several ideas to use practical cross-organizational information sharing to find attackers and mitigate their impact.

People:

Papers:

Mark Allman, Christian Kreibich, Vern Paxson, Robin Sommer, Nicholas Weaver. Principles for Developing Comprehensive Network Visibility. USENIX Workshop on Hot Topics in Security, July 2008. To appear.
Mark Allman, Ethan Blanton, Vern Paxson, Scott Shenker. Fighting Coordinated Attackers with Cross-Organizational Information Sharing. ACM SIGCOMM HotNets, November 2006. Presentation slides. Public review available.
Mark Allman, Ethan Blanton, Vern Paxson. An Architecture for Developing Behavioral History. Workshop on Steps to Reduce Unwanted Traffic on the Internet (SRUTI), July 2005. Presentation slides available.

Talks:

Mark Allman. Improving Internet Security Through Cross-Organizational Information Sharing. Case Western Reserve University EECS Seminar, October 2006.
Mark Allman. Sharing Information for Better Network Security. Ohio ICE Fall Technical Conference, October 2006.
Mark Allman. An Architecture for Developing Behavioral History. Informal talk at CWRU's Network Chat, April 2005.

Also see the CCIED center's web pages.

(Posted: Mon May 23, 2005; Updated: Mon Jul 21, 2008)