Sathya Chandran    Grad Student (PhD)    Computing & Information Sciences    Kansas State University    Nichols 127    sathya AT ksu DOT edu    +1 785 236 0120

Research

• Security Visualization tool for viewing and analysis of data from disparate data sources like IDS, firewall, syslog, HIDS etc. The goal of this project is to develop a tool that can uncover attacker actions using visualization and human input.
• Snort Intrusion Analysis Using Proof Strengthening (SnIPS) focuses on design and implementation an alert correlation and prioritization engine to take alerts from various sources like IDS, firewall, HIDS etc. and construct correlation graphs that depict attacker scenario. In addition to correlation, the tool also ranks the received alerts using evidence fusion theories like Dempster-Shafer.

Software

• SnIPS

Teaching

• Fall 2011 Computer and Information Security (CIS 551/751)
• Spring 2012 Applied Cryptography (CIS 753/553)

Publications

1. Classification of UDP Traffic for DDoS Detection. Alexandru G. Bardas, Loai Zomlot, Sathya Chandran, Xinming Ou, Raj Rajagopalan and Marc R. Eisenbarth. In 5th USENIX Workshop on Large-Scale Exploits and Emerging Threats (LEET), San Jose, CA, U.S.A., April 2012.
2. Prioritizing Intrusion Analysis Using Dempster-Shafer Theory. Loai Zomlot, Sathya Chandran, Kui Luo, Xinming Ou and S. Raj Rajagopalan. In proceedings of 4th Workshop on Artificial Intelligence and Security (Co-located with ACM CCS 2011), Chicago, IL, U.S.A., October 2011.
3. Practical IDS Alert Correlation in the Face of Dynamic Threats. Sathya Chandran, Loai Zomlot and Xinming Ou. Proceedings of the 2011 International Conference on Security and Management (SAM 11), Las Vegas, NV, U.S.A., July 2011.

Posters

1. Prioritizing Intrusion Analysis Using Dempster-Shafer Theory. Loai Zomlot, Sathya Chandran, Xinming Ou and S. Raj Rajagopalan. Presented at the 2011 IEEE Symposium on Security and Privacy (Oakland), Oakland, CA, U.S.A., May 2011.

Talks

1. SAM'11 slides

Links