Bro: A system for detecting network intruders in real-time

Computer Networks

Volumn 31, Issue 23, 1999, Pages 2435-2463

  Paxson, Vern ^a,b,c  

^a LAWRENCE BERKELEY NATIONAL LABORATORY   (United States)

^b INTERNATIONAL COMPUTER SCIENCE INSTITUTE   (United States)

^c UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CONGESTION CONTROL (COMMUNICATION); DATA PRIVACY; HIGH LEVEL LANGUAGES; REAL TIME SYSTEMS; SECURITY OF DATA; SIGNAL FILTERING AND PREDICTION; TELECOMMUNICATION LINKS; TELECOMMUNICATION TRAFFIC;

DOMAIN-SPECIFIC LANGUAGES; NETWORK INTRUSION DETECTION; PASSIVE NETWORK MONITORING;

COMPUTER NETWORKS;

EID: 0033295259     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/S1389-1286(99)00112-7     Document Type: Article

References (30)

1. AXENT Technologies, Intruder Alert, http://www.axent. com/product/smsbu/ITA/, 1999.
2. R. Brown, Calendar queues: a fast O(1) priority queue implementation for the simulation event set problem, Commun. ACM 31 (10) (1988) 1220-1227.
3. Cisco Systems, NetRanger, http://www.cisco.com/warp/ public/cc/cisco/mkt/ security/nranger/index.html, 1999.
4. C. Compton, D. Tennenhouse, Collaborative load shedding for media-based applications, in: Proceedings of the International Conference on Multimedia Computing and Systems, Boston, MA, May 1994.
5. Internet Security Systems, Inc., RealSecure™, http:// www.iss.net/prod/rs.php3, 1999.
6. V. Jacobson, C. Leres, S. McCanne, tcpdump, available via anonymous ftp to ftp.ee.lbl.gov, June 1989.
7. B. Kantor, BSD Rlogin, RFC 1282, Network Information Center, SRI International, Menlo Park, CA, December 1991.
8. S. McCanne, V. Jacobson, The BSD packet filter: a new architecture for user-level packet capture, in: Proceedings of 1993 Winter USENIX Conference, San Diego, CA.
9. S. McCanne, C. Leres, V. Jacobson, libpcap, available via anonymous ftp to ftp.ee.lbl.gov, 1994.
10. B. Mukherjee, L. Heberlein, K. Levitt, Network intrusion detection, IEEE Network 8 (3) (1994) 26-41.
11. Network Flight Recorder, Inc., Network Flight Recorder, http://www.nfr.com, 1999.
12. V. Paxson, C. Saltmarsh, Glish: a user-level software bus for loosely-coupled distributed systems, in: Proceedings of 1993 Winter USENIX Conference, San Diego, CA.
13. V. Paxson, Empirically-derived analytic models of wide-area TCP connections, IEEE/ACM Trans. Networking 2 (4) (1994) 316-336.
14. V. Paxson, flex, available via anonymous ftp to ftp.ee.lbl.gov, September 1996.
15. V. Paxson, End-to-end Internet packet dynamics, in: Proceedings of SIGCOMM '97, Cannes, France, September 1997.
16. V. Paxson, End-to-end routing behavior in the Internet, IEEE/ACM Trans. Networking 5 (5) (1997) 601-615.
17. V. Paxson, Bro: a system for detecting network intruders in real-time, in: Proceedings of the Seventh USENIX Security Symposium, January 1998.
18. J. Postel, J. Reynolds, Telnet Protocol Specification, RFC 854. Network Information Center, SRI International, Menlo Park, CA, May 1983.
19. J. Postel, J. Reynolds, Telnet Option Specifications, RFC 855. Network Information Center, SRI International, Menlo Park, CA, May 1983.
20. J. Postel, J. Reynolds, File Transfer Protocol (FTP), RFC 959, Network Information Center, SRI International, Menlo Park, CA, October 1985.
21. T. Ptacek, T. Newsham, Insertion, evasion, and denial of service: eluding network intrusion detection, Secure Networks Inc., http://www.aciri.org/vern/Ptacek-Newsham-Evasion-98.ps, Jan. 1998.
22. N. Puketza, K. Zhang, M. Chung, B. Mukherjee, R. Olsson, A methodology for testing intrusion detection systems, IEEE Trans. Software Engrg. 22 (10) (1996) 719-729.
23. M. Ranum, K. Landfield, M. Stolarchuk, M. Sienkiewicz, A. Lambeth, E. Wall, Implementing a generalized tool for network monitoring, in: Proceedings of LISA '97, USE-NIX 11th Systems Administration Conference, San Diego, October 1997.
24. Y. Rekhter, B. Moskowitz, D. Karrenberg, G.J. de Groot, E. Lear, Address Allocation for Private Internets, RFC 1918, February 1996.
25. R. Srinivasan, RPC: Remote Procedure Call Protocol Specification Version 2, RFC 1831, DDN Network Information Center, August 1995.
26. R. Srinivasan, XDR: External Data Representation Standard, RFC 1832, DDN Network Information Center, August 1995.
27. M.St. Johns, Identification Protocol, RFC 1413, Network Information Center, SRI International, Menlo Park, CA, February 1993.
28. Touch Technologies, Inc., INTOUCH INSA, http:// www.ttisms.com/tti/nsa_www.html, 1999.
29. G. White, E. Fisch, U. Pooch, Cooperating security managers: a peer-based intrusion detection system, IEEE Network 10 (1) (1994) 20-23.
30. D. Zimmerman, The Finger User Information Protocol, RFC 1288, Network Information Center, SRI International, Menlo Park, CA, December 1991.