Connectionless port scan detection on the backbone

Conference Proceedings of the IEEE International Performance, Computing, and Communications Conference

Volumn 2006, Issue , 2006, Pages 567-576

  Sridharan, Avinash ^a   Ye, Tao ^b   Bhattacharyya, Supratik ^b  

^a Dept of Electrical Engineering ^*  (United States)

^b Sprint Applied Research & Advanced Technology Labs California   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS PATTERNS; MONITORING PLATFORM; PORT SCAN DETECTION; TRANSIT BACKBONE NETWORK;

ALGORITHMS; CHANNEL CAPACITY; INFORMATION ANALYSIS; OPTIMIZATION; TELECOMMUNICATION SYSTEMS; TELECOMMUNICATION TRAFFIC;

TELECOMMUNICATION NETWORKS;

EID: 33751053025     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/.2006.1629454     Document Type: Conference Paper

References (18)

1. http://securityresponse.symantec.com//avcenter/venc/data/w32.blaster. worm.html
2. http://www.cert.org/advisories/CA-2001-19.html
3. http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm. html
4. Chuck Fraleigh, Sue Moon, Brian Lyles, Chase Cotton, Mujahid Khan, Rob Rockell, Deborah Moll, Ted Seely and Christophe Diot. Packet-Level Traffic Measurements from the Sprint IP Backbone". In IEEE Network Magazine, 2003
5. Vinod Yegneswaran, Paul Barford and Johannes Ullrich. Internet Intrusions: Global Characteristics and Prevalence. In Proceedings of ACM BIOMETRICS 2003
6. Jaeyeon Jung, Vern Paxson, Arthur W. Berger, and Hari Balakrishnan: Fast Portscan Detection Using Sequential Hypothesis Testing. In Proc. IEEE Symposium on Security and Privacy, 2004
7. C. Fraleigh and S. Moon and B. Lyles and C. Cotton and M. Khan and D. Moll and R. Rockell and T. Seely and C. Diot. Packet-Level Traffic Measurements from the Sprint IP Backbone. IEEE Network Magazine, vol. 17, no. 6, Nov. 2003.
8. http://www.snort.org
9. S. Staniford, J. A. Hoagland, and J. M. McAlerney. Practical automated detection of stealthy portscans. In Proceedings of the 7th ACM Conference on Comuter and Communications Security, Athens, Greece, 2000
10. C. Leckie and R. Kotagiri. A probabilisitc approach to detecting network scans. In Proceedings of the Eighth IEEE Network Operations and Management Symposium (NOMS 2002), Pages 359-372, Florence, Italy, Apr. 2002.
11. S. Robertson, E. V. Siegel, M. Miller, and S. J. Stolfo. Surveillance detection in high bandwidth environments. In Proceedings of the 2003 DARPA DISCEX III Conference, pages 130-139, Washington, DC, 2003. IEEE Press. 22-24 April 2003.
12. http://www.icir.org/vern/bro-info.html
13. Nicholas Weaver, International Computer Science Institute; Stuart Staniford, Nevis Networks; Vern Paxson, International Computer Science Institute and Lawrence Berkeley National Laboratory. Very Fast Containment of Scanning Worms. In Proceeding of 13th Usenix Security Symposium 2004
14. A Virtual Honeypot Framework. In Proceedings of the 13th USENIX Security Symposium
15. Xuxian Jiang and Dongyan Xu. Collapsar: A VM-Based Architecture for Network Attack Detention Center. In Proceedings of the 13th USENIX Security Symposium
16. Jainning Mai, Ashwin Sridharan, Chen-Nee Chuah, Tao Ye and Hui Zang. (Sprint Nextel Advanced Technology Labs. On the Impact of Packet Sampling on Anomaly Detection. Technical Report RR05-ATL-070679, 2005
17. Andrei Broder and Michael Mitzenmacher. Network Applications of Bloom Filters: A Survey. Internet Mathematics Vol. I, No. 4: 485-509
18. http://www.linklogger.com/TCP1025.htm