A statistical analysis of attack data to separate attacks

Proceedings of the International Conference on Dependable Systems and Networks

Volumn 2006, Issue , 2006, Pages 383-392

  Cukier, Michel ^a   Berthier, Robin ^a   Panjwani, Susmit ^a   Tan, Stephanie ^a  

^a UNIVERSITY OF MARYLAND   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ATTACK DATA; CLUSTERING CHARACTERISTICS; PORT SCANS; VULNERABILITY SCANS;

ALGORITHMS; ELECTRONIC MAIL; PACKET NETWORKS; SECURITY OF DATA; STATISTICAL METHODS;

DATA REDUCTION;

EID: 33845589988     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2006.9     Document Type: Conference Paper

References (16)

1. E. Alata, M. Dacier, Y. Deswarte, M. Kaaniche, K. Kortchinsky, V. Nicomette, V.H. Pham, and F. Pouget, Collection and Analysis of Attack data based on Honeypots deployed on the Internet, in Proc, of 1st Workshop on Quality of Protection (QoP), Milano, Italy, 2005.
2. Common Internet File System, Technical Reference, SNIA https://www.snia.org/tech_activities/CIFS/CIFS-TR-1p00_FINAL.pdf.
3. R.O. Duda and P.E. Hart, Pattern Classificationand Scene Analysis. New York: John Wiley and Sons. 1973
4. P. Dokas, L. Ertoz, V. Kumar, A. Lazarevic, J. Srivastava, and P.-N. Tan, Data Mining for Network Intrusion Detection, in Proc. NSF Workshop on Next Generation Data Mining, Baltimore, MD, 2002.
5. E. Eskin, A. Arnold, M. Prerau, L. Portnoy and S. Stolfo, A Geometric Framework for Unsupervised Anomaly Detection: Detecting Intrusions in Unlabeled Data, in Data Mining for Security Applications, Kluwer, 2002.
6. http://www.ethereal.com/
7. The Honeynet Project, Know Your Enemy, Addison-Wesley, 2002.
8. http://www.honeynet.org/papers/stats/
9. X. Jiang and D. Xu, Behavioral Footprinting: a New Dimension to Characterize Self-Propagating Worms, Department of Computer Science Technical Report, Purdue University, January 2005.
10. J. B. MacQueen, Some Methods For Classification and Analysis of Multivariate Observations, in Proc. Fifth Berkeley Symposium on Mathematical Statistic and Probability, L. M. LeCam and J. Neyman, editors, University of California Press, Berkley, CA, 1967, pp 281-297.
11. http://sourceforge.net/projects/nettime
12. S. Panjwani, S. Tan, K. Jarrin, and M. Cukier, An Experimental Evaluation to Determine if Port Scans are Precursors to an Attack, in Proc. International Conference on Dependable Systems and Networks (DSN-2005), Yokohama, Japan, June 28-July 1, 2005.
13. L. Portnoy, E. Eskin and S. J. Stolfo, Intrusion detection with unlabeled data using clustering, in Proc. ACM CSS Workshop on Data Mining Applied to Security (DMSA-2001), Philadelphia, PA, November 5-8, 2001.
14. F. Pouget and M. Dacier, Honeypot-based Forensics, in Proc. AusCERT Information Technology Security Conference 2004 (AusCERT04), Ashmore, Australia, May 23-27, 2004.
15. http://www.cs.waikato.ac.nz/ml/weka/
16. I. H. Witten, E. Frank, L. Trigg, M. Hall, G. Holmes, and S. J. Cunningham, Weka: Practical Machine Learning Tools and Techniques with Java Implementations, Department of Computer Science, University of Waikato, New Zealand.