Matching TCP packets and its application to the detection of long connection chains on the Internet

Proceedings - International Conference on Advanced Information Networking and Applications, AINA

Volumn 1, Issue , 2005, Pages 1005-1010

  Yang, Jianhua ^a   Huang, Shou Hsuan Stephen ^a  

^a University of Houston ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CONNECTION CHAIN; NETWORK ATTACKERS; TCP PACKETS;

ALGORITHMS; INTERNET; NETWORK PROTOCOLS; REAL TIME SYSTEMS; SECURITY SYSTEMS;

PACKET NETWORKS;

EID: 26444507627     PISSN: 1550445X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AINA.2005.240     Document Type: Conference Paper

References (14)

1. Yin Zhang and Vern Paxson, "Detecting Stepping Stones", Proceedings of the 9th USENIX Security Symposium, Denver, CO, August 2000, pp. 67-81.
2. Stuart Staniford-Chen and L. Todd Heberlein, "Holding Intruders Accountable on the Internet", Proceedings of the 1995 IEEE Symposium on Security and Privacy, Oakland, CA, May 1995, pp. 39-49.
3. Kwong H. Yung, "Detecting Long Connecting Chains of Interactive Terminal Sessions", RAID 2002, Springer Press, Zurich, Switzerland, October 2002, pp. 1-16.
4. Z. J. Tang, "Designing and Implementing of Network Intrusion Detection System" (in Chinese), Publishing House of Electronics Industry of China, Beijing, China, 2002.
5. Behrouz Forouzan, "TCP/IP Protocol Suite" (Second Edition). McGraw-Hill, June 2002.
6. Lawrence Berkeley National Laboratory (LBNL), "The Packet Capture library", ftp://ftp.ee.lbl.gov/ libpcap.tar.z, accessed March 2004.
7. Data Nerds Web Site, "Winpcap and Windump", http://www.datanerds.net, accessed July 2004.
8. T. Ylonen, "SSH Protocol Architecture", draft IETF document, http://www.ietf.org/internet-drafts/draft-ietf-secsh-architecture-16.txt, June 2004.
9. University of Southern California, "Transmission Control Protocol", RFC 793, September 1981.
10. Martin P. Clark, "Data Networks, IP and the Internet Protocols, Design and Operation", Wiley, U.S.A., 2003.
11. T. Ylonen, "SSH Transport Layer Protocol", draft IETF document, http://www.ietf.org/internet-drafts/ draft-ietf-secsh-transport-18.txt, June 2004.
12. rd International Conference on Information Security (Infosecu'04), Shanghai, China, November 2004, pp. 198-203.
13. CERT, "Explosion of Incidents", http://www.cert.org, accessed July 2004.
14. David L. Donoho, Ana Geogina Flesia, et al., "Multiscale Stepping-Stones Detection: Detecting Pairs of Jittered Interactive Streams by Exploiting Maximum Tolerable Delay," RAID 2002, Springer Press, Zurich, Switzerland, October 2002, pp. 49-64.