Process query systems for network security monitoring

Proceedings of SPIE - The International Society for Optical Engineering

Volumn 5778, Issue PART I, 2005, Pages 520-530

  Berk, Vincent ^a   Fox, Naomi ^a  

^a DARTMOUTH COLLEGE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; COMPUTER NETWORKS; COMPUTER WORMS; DATA REDUCTION; FAILURE ANALYSIS; GRAPHICAL USER INTERFACES; ROUTERS;

DATA STREAMS; NETWORK SECURITY; PROCESS QUERY SYSTEMS; SECURITY MONITORING;

SECURITY OF DATA;

EID: 26444508935     PISSN: 0277786X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1117/12.609855     Document Type: Conference Paper

References (13)

1. "Snort - the open source network intrusion detection system," project website, 2005. Available at http://www.snort.org.
2. "Enterasys dragon 7.0 network sensor," company website, Enterasys, 2005. Available at http://www.enterasys.com/products/ids/DSNSS7.
3. "Dshield - distributed intrusion detection system, the internet's early warning system and internet," project website, 2005. Available at http://www.dshield.org.
4. "Tripwire, inc. - tripwire is the leading provider of change auditing solution," company website, Tripwire, Inc., 2005. Available at http://www.tripwire.com.
5. R. S. Gray and V. H. Berk, "Rapid detection of worms using icmp-t3 analysis," Proceedings of SPIE 5403, pp. 89-101, April 2004.
6. K. Lougheed and Y. Rekhter, "A border gateway protocol (bgp)," Internet Engineering Task Force Network Working Group RFC 1105, June 1989. Available at http://www.ietf.org/rfc/rfc1105.txt?number=1105.
7. D. McGrath, "Passive internet health monitoring with bgp," presentation, NANOG, October 2003. Available at http://www.nanog.org/mtg-0310/ mcgrath.html.
8. S. Staniford, J. A. Hoagland, and J. M. McAlerney, "Practical automated detection of stealthy portscans," Journal of Computer Security 10, pp. 105-136, 2002.
9. "The netfilter/iptables project homepage," project website, Netfilter, 2005. Available at http://www.netfilter.org.
10. "Samba - opening windows to a wider world," project website, 2005. Available at http://www.samba.org.
11. L. Spitzner, "Honeytokens: The other honeypot," Security Focus InFocus, July 2003. Available at http://www.securityfocus.com/infocus/1713.
12. H. Debar, D. Curry, and B. Feinstein, "The intrusion detection message exchange format," Internet Engineering Task Force Intrusion Detection Exchange Internet-Draft, January 27, 2005. Available at http://www.ietf.org/internet-drafts/draft-ietf-idwg-idmef-xml-14.txt.
13. "Skaion corporation - specializing in computer network security," company website, Skaion Corporation, 2005. Available at http://www.skaion.com.