A model of conversation exchange dynamics for detection of epidemic-style network attacks

Midwest Symposium on Circuits and Systems

Volumn 3, Issue , 2004, Pages

  Mylavarapu, S ^a   Zachary, J ^a   Ettlich, D ^b   McEachen, J ^b   Ford, D ^b  

^a UNIVERSITY OF SOUTH CAROLINA   (United States)

^b NAVAL POSTGRADUATE SCHOOL   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BANDWIDTH; BOUNDARY CONDITIONS; COMPUTER WORMS; DATA MINING; DATA REDUCTION; PACKET NETWORKS; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC;

CONVERSATION EXCHANGE DYNAMICS (CED); NETWORK ANOMALIES; NETWORK ATTACKS; NETWORK INTRUSION DETECTION SYSTEMS (NIDS);

COMPUTER NETWORKS;

EID: 11144286566     PISSN: 15483746     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. S. Donald, R. McMillen, D. Ford, and J. McEachen. Therminator 2: A thermodynamics-based method for real-time patternless intrusion detection. In Proceedings of the IEEE Military Communications Conference (MILCOM), pages 1498-1502, Los Angeles, CA, October 2002.
2. D. Ford. Application of thermodynamics to the reduction of data generated by a nonstandard system. Technical Report arXiv:condmat/0402325v1, Naval Postgraduate School Department of Physics, 2004.
3. J. Haines, R. Lippman, D. Fried, M. Zissman, E. Tran, and S. Boswell. 1999 darpa intrusion detection evaluation: Design and procedures. Technical report, Massachusetts Institute of Technology Lincoln Laboratory, 1999.
4. J. Hughes, T. Aura, and M. Bishop. Using conservation of flow as a security mechanism in network protocols. In Proceedings of the 2000 IEEE Symposium on Security and Privacy, May 2000.
5. C. Krugel, T. Toth, and E. Kirda. Service specific anomaly detection for network intrusion detection. In Proceedings of Symposium on Applied Computing (SAC), Madrid, Spain, March 2002.
6. A. Kuzmanovic and E. Knightly. Low-rate tcptargeted denial of service attacks. In Proceedings of the 2003 ACM Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM), pages 75-86, Karlsruhe, Germany, 2003.
7. J. Marinovich and S. Walch. Analysis of initial and boundary conditions in therminator conversation exchange dynamics. Master's thesis, Naval Postgraduate School, Monterey, CA, March 2004.
8. D. Moore, C. Shannon, G. Voelker, and S. Savage. Internet quarantine: Requirements for containing self-propagating code. In Proceedings of the IEEE INFOCOM, San Francisco, CA, March 2003.
9. S. S. Mylavarapu. Detecting attacks with therminator. Master's thesis, University of South Carolina, Columbia, SC, April 2004.
10. V. Paxson. Bro: A system for detecting network intruders in real-time. Computer Networks, 31(23-24), December 1999.
11. T. Ptacek and T. Newsham. Insertion, evasion, and denial of service: Eluding network intrusion detection. Technical report, Secure Networks, Inc., January 1998.
12. U. Shankar and V. Paxson. Active mapping: Resisting nids evasion without altering tra_c. In Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, May 2003.
13. R. Sommer and V. Paxson. Enhancing bytelevel network intrusion detection signatures with context. In Proceedings of the ACM Conference on Computer and Communications Security (CCS'03), Washington, D.C., November 2003.
14. J. Zachary, J. McEachen, and D. Ettlich. Conversation exchange dynamics for real-time network monitoring and anomaly detection. In Proceedings of the Second IEEE International Workshop on Information Assurance, Charlotte, NC, April 2004.