Abstract
The Network Vertical Intrusion Model (NetVIM) is proposed in this paper. The NetVIM is a vertical four layer model that provides for the identification, detection and profiling of network based attacks. The NetVIM models attack profiles consisting of the components involved in the physical delivery, the involved computation and communication processes and the states and state transitions inherent in an attack. This paper describes the NetVIM together with an example application to a TCP port scan attack.