Abstract
A Computation-Communication Sequencing model for network-based computer attacks is proposed. Simplicity of abstraction is achieved by concentrating exclusively on the computation and communication processes involved in an attack. This paper presents preliminary studies resulting from our approach. Applications to port scanning, SYN flood attack and buffer overflow attack are given. The proposed model is best suited as a part of additional system profile models were a realistic IDS based on this approach to be constructed.