Malicious sniffing systems detection platform

Proceedings - International Symposium on Applications and the Internet

Volumn , Issue , 2004, Pages 201-207

  Trabelsi, Zouheir ^a   Rahmani, Hamza ^a   Kaouech, Kamel ^a   Frikha, Mounir ^a  

^a UNIVERSITY OF TUNIS   (Tunisia)

Author keywords

[No Author keywords available]

Indexed keywords

ADDRESS RESOLUTION PROTOCOLS (ARP); ETHERNET NETWORKS; OPERATING SYSTEMS (OP); STATISTICAL MODELS;

BROADCASTING; COMPUTER OPERATING SYSTEMS; DATABASE SYSTEMS; INTERFACES (COMPUTER); MATHEMATICAL MODELS; PERSONAL COMPUTERS; PERSONAL COMPUTING; PROBABILITY; STATISTICAL METHODS;

COMPUTER NETWORKS;

EID: 2642549893     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SAINT.2004.1266117     Document Type: Conference Paper

References (15)

1. Freedman, Pisani, Purves and Adhikari, «Statistics - Second Edition », W.W. Norton & Company, Inc. 1991.
2. Grundshober, S. «Sniffer Detector Report », Global Security Analysis Lab., Zurich Research Laboratory, IBM Research Division, June 1998.
3. Hornig, C., « A Standard for the Transmission of IP Datagrams over Ethernet Networks », RFC-894, Symbolics Cambridge Research Center, April 1984.
4. Jacobson, V. Leres, C., and Mc-Canne S., «The Tcpdump Manual Page », Lawrence Berkley Laboratory.
5. Plummer, David C., «An Ethernet Address Resolution Protocol-Converting Network Protocol to 48 bit Ethernet Address for Transmission on Ethernet Hardware », RFC-826, November 1982.
6. Postel, J., «Internet Protocol», RFC-791, USC/Information Science Institute, Sempter 1981.
7. Postel, J., «Transmission Control Protocol», RFC-793, USC/Information Science Institute, Sempter 1981.
8. Postel, J., «Internet Control Message Protocol », RFC-792, USC/Information Science Institute, Sempter 1981.
9. Richard Stevens - «TCP/IP Illustrated : Volume 1», 2001.
10. Security Software Inc., «Antisniff», http://www. securitysoftwaretech.com, Technical Report 2000.
11. S. Grundschober. «Sniffer Detector report», Diploma Thesis, IBM Research Division, Zurich Research Laboratory, Global Security Analysis Lab, June 1998.
12. J. Drury. «Sniffers: What are they and how to protect from them», November 11, 2000. http://www.sans.org/infosecFAQ/switchednet/ sniffers.htm.
13. D. Wu and F. Wong. «Remote Sniffer Detection». Computer Science Division, University of California, Berkeley. December 14, 1998.
14. Daiji Sanai, «Detection of Promiscuous Nodes Using ARP Packets» http://www.securityfriday.com/.
15. Nmap Tools, http://securityfocus.com.