Planning, Petri Nets, and Intrusion Detection
Yuan Ho, Deborah A. Frincke, Donald B. Tobin · 1998
Detection of intrusions with multiple sources and intrusions where incomplete behavioral data is available is a difficult task. We propose a new intrusion detection architecture combining partial order planning and executable Petri Nets to detect such attacks. Partial Order State Transition Analysis Technique, or POSTAT, increases the flexibility of the traditional state analysis approach by allowing unordered events in the signature action sequence.