A service-centric model for intrusion detection in next-generation networks

In this paper we argue for a new service-centric model for developing and implementing intrusion detection systems. This new approach is influenced by the convergence of computer networking and telecommunications systems, and ways that the telecoms industry manages issues of fraud. Interoperability of intrusion detection components with the rest of the system, in particular logging and billing subsystems, requires standardisation of usage data representation formats and development of a standard ontology for intrusion detection.