Host anomalies from network data

Proceedings from the 6th Annual IEEE System, Man and Cybernetics Information Assurance Workshop, SMC 2005

Volumn 2005, Issue , 2005, Pages 325-332

  Gates, Carrie ^a,b,c   Becknel, Damon ^d  

^a IEEE   (Canada)

^b DALHOUSIE UNIVERSITY   (Canada)

^c CARNEGIE MELLON UNIVERSITY   (United States)

^d UNITED STATES MILITARY ACADEMY   (United States)

Author keywords

Network intrusion detection

Indexed keywords

NETWORK DATA; NETWORK INTRUSION DETECTION; NETWORK SYSTEMS; RAW DATA;

COMPUTER APPLICATIONS; DATA PROCESSING; INFORMATION ANALYSIS; KNOWLEDGE REPRESENTATION; PROFESSIONAL ASPECTS; TELECOMMUNICATION TRAFFIC;

COMPUTER NETWORKS;

EID: 33745442732     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IAW.2005.1495970     Document Type: Conference Paper

References (14)

1. Martin Roesch. Snort - lightweight intrusion detection for networks. In Proceedings of LISA '99: 13th Systems Administration Conference, 1999. Seattle, Washington, USA, November 7-12, 1999.
2. Vern Paxson. Bro: A system for detecting network intruders in real-time. In Proceedings of the 7th USENIX Security Symposium. San Antonio, Texas. January 26-29, 1998.
3. Levent Ertoz, Eric Eilertson, Aleksandar Lazarevic, Pang-Ning Tan, Paul Dokas, Vipin Kumar and Jaideep Srivastava. Detection of novel network attacks using data mining. In Proceedings of the 2003 ICDM Workshop on Data Mining for Computer Security. Melbourne, Florida, USA. November 19, 2003.
4. D.E, Denning. An intrusion-detection model, IEEE Transactions on Software Engineering. 1987. Vol. 13, no. 2, pages 222-232.
5. Todd Heberlein, Gihan Dias, Karl Levitt, Biswanath Mukherjee, Jeff Wood, and David Wolber. A network security monitor. In Proceedings of the 1990 IEEE Symposium on Research in Security and Privacy. Oakland, California, USA. 7-9 May 1990.
6. Aleksandar Lazarevic, Levent Ertoz, Vipin Kumar, Aysel Ozgur and Jaideep Srivastava. A comparative study of anomaly detection schemes in network intrusion detection. In Proceedings of the ThirdSIAM Conference on Data Mining. San Francisco, May 2003.
7. th Army Science Conferece. November 1999.
8. C. Leckie and R. Kotagiri. A probabilistic approach to detecting network scans. In Proceedings of the 2002 IEEE Network Operations and Management Symposium. Florence, Italy. April 2002.
9. Hyukjoon Kim, Surrey Kim, Michael A. Kouritzin and Wei Sun. Detecting network portscans through anomaly detection. In Proceedings of SPIE: Signal Processing, Sensor Fusion, and Target Recognition XIII. Vol. 5429. Pages 254-263.
10. M. Iguchi and S. Goto. "Detecting Malicious Activities through Port Profiling." IEICE Transactions on Information and Systems, Volume E82-D, Number 4, April 1999. Pages 784-792.
11. [11]McAfee Security. http://us.mcafee.com/virusInfo/default.asp?id=helpCe nter&hcName=mydoom&cid=9547. Last visited: 16 March 2004.
12. Carrie Gates, Michael Collins, Michael Duggan, Andrew Kompanek, and Mark Thomas. More NetFlow tools: For performance and security. In Proceedings of the 18th Large Installation Systems Administration Conference (LISA 2004). Pages 121 -132. Atlanta, Georgia. November 14-19, 2004.
13. A. Kompanek and M. Thomas. "SiLK Analysis Suite". http://sourceforge.net/projects/silktools/. Last visited: 16 March 2004.
14. Cisco Systems. Cisco CNS NetFlow Collection Engine. http://www.cisco.com/ en/US/products/sw/netmgtsw/ ps1964/products user_guide_chapter09186a00801ed 569.html Last visited: 5 April 2004.