The use of distributed network-based IDS systems in detection of evasion attacks

Proceedings - Advanced Industrial Conference on Telecommunications/Service Assurance with Partial and Intermittent Resources Conference/E-Learning on Telecommunications Workshop AICT/SAPIR/ELETE 2005

Volumn 2005, Issue , 2005, Pages 78-82

  Basicevic, Ilija ^a   Popovic, Miroslav ^a   Kovacevic, Vladimir ^a  

^a UNIVERSITY OF NOVI SAD   (Serbia)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER ARCHITECTURE; MATHEMATICAL MODELS; PROBLEM SOLVING; SECURITY OF DATA;

EVASION ATTACKS; HOST BASED INTRUSION PREVENTION SYSTEMS (HIPS); INTRUSION DETECTION SYSTEMS (IDS);

DISTRIBUTED COMPUTER SYSTEMS;

EID: 33750993204     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AICT.2005.90     Document Type: Conference Paper

References (18)

1. - Insertion, Evasion, and Denial of Service: Eluding Network Intrusion, Thomas H.Ptacek, Timothy N. Newsham, January, 1998, Secure Networks Inc. white paper
2. - RFC 791, Internet Protocol, September 1981, Information Sciences Institute, Editor: Jon Postel
3. -RFC 793, Transmission Control Protocol, September 1981, Information Sciences Institute, Editor: Jon Postel
4. - Ambiguity Resolution via Passive OS Fingerprinting, Greg Taleck, NFR Security, Inc., RAID 2003, Sixth International Symposium on Recent Advances in Intrusion Detection, 2003 Pittsburgh, PA, USA
5. - Mobile Agents in Intrusion Detection And Response, W. Jansen et al., Proceedings of the 12th Annual Canadian Information Technology Security Symposium, Ottawa, Canada, June 2000.
6. - An Architecture for Intrusion Detection using Autonomous Agents, Jai Sundar Balasubramaniyan, et al., 1998, COAST Technical Report 98/05, COAST Laboratory, Purdue University
7. - A Method of Tracing Intruders by Use of Mobile Agents, Midori Asaka, Shunji Okazawa, Atsushi Taguchi, Shigeki Goto, In 9th Annual Conference of the Internet Society (INET'99), 1999.
8. - A survey of commercial tools for intrusion detection, Håkan Kvarnström, Technical Report 99-8, Department of Computer Engineering, Chalmers University of Technology, Göteborg, Sweden, 1999
9. - A Strict Anomoly Detection Model For Ids, sasha / beetle, PHRACK Magazine No 56, www.phrack.org
10. - 'Snortnet' - A Distributed Intrusion Detection System, Fyodor Yarochkin, June 26, 2000, Kyrgyz Russian Slavic University, Bishkek, Kyrgyzstan
11. - The Perils of Deep Packet Inspection, Thomas Porter, http://www.securityfocus.com/infocus/1817
12. - WinPCap, Windows Packet Capture Library, http://winpcap.polito.it
13. - Snort, open source network intrusion prevention system, http://www.snort.org
14. - S. Wu and U. Manber. A fast algorithm for multi-pattern searching. Technical Report TR-94-17, University of Arizona, 1994.
15. - Alfred V. Aho and Margaret J. Corasick. Efficient string matching: An aid to bibliographic search. Communications of the ACM 18(6):333-340, June 1975
16. - R. Boyer and J. Moore. A fast string searching algorithm. Commun. ACM, 20(10):762-772, October 1977.
17. - Hook Drivers, Network Devices and Protocols: Windows DDK, http://msdn.microsoft.com
18. - Windows Filtering Platform, http://www.microsoft.com/whdc/device/ network/WFP.mspx