A DoS resilient flow-level intrusion detection approach for High-speed networks

Proceedings - International Conference on Distributed Computing Systems

Volumn 2006, Issue , 2006, Pages

  Gao, Yan ^a   Li, Zhichun ^a   Chen, Yan ^a  

^a NORTHWESTERN UNIVERSITY   (United States)

Author keywords

Data streaming; High speed networking; Intrusion detection; Statistical detection

Indexed keywords

DATA STREAMING TECHNIQUES; INTRUSION DETECTION SYSTEMS; STATISTICAL DETECTION;

COMPUTER VIRUSES; COMPUTER WORMS; DATA TRANSFER; GATEWAYS (COMPUTER NETWORKS); HIGH SPEED NETWORKS; ROUTERS;

INTRUSION DETECTION;

EID: 33947634049     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICDCS.2006.6     Document Type: Conference Paper

References (17)

1. Arbor Networks. Intelligent Network Management with Peakflow Traffic. http://www. arbornetworks.com/download.php.
2. Cisco Inc. Per-Packet Load Balancing, 2003. http://www.cisco.com/ univarcd/cc/td/doc/product/software/ios120/120newf%t/120limit/120s/120s21/pplb. pdf.
3. G. Cormode and S. Muthukrishnan. What's new: Finding significant differences in network data streams. In Proc. of IEEE Infocom, 2004.
4. N. Duffield, C. Lund, and M. Thorup. Flow sampling under hard resource constraints. In Proc. of ACM SIGMETRICS, 2004.
5. Y. Gao, Z. Li, and Y. Chen. Towards a high-speed router-based anomaly/intrusion detection system. http://list.cs.northwestern.edu/hpnaidm. html.
6. J. Jung et al. Fast porfscan detection using sequential hypothesis testing. In Proc. of the IEEE Symposium on Security and Privacy, 2004.
7. R. R. Kompella, S. Singh, and G. Varghese. On scalable attack detection in the network. In Proc. of ACM/USENIX IMC, 2004.
8. B. Krishnamurthy, S. Sen, Y. Zhang, and Y. Chen. Sketch-based change detection: Methods, evaluation, and applications. In Proc. of ACM SIGCOMM Internet Measurement Conference (IMC), 2003.
9. D. Moore et al. Inferring Internet denial of service activity. In Proceedings of the 2001 USENIX Security Symposium, Aug. 2001.
10. D. Moore et al. The spread of the Sapphire/Slammer worm. http://www.caida.org. 2003.
11. R. Schweller, A. Gupta, B. Parsons, and Y. Chen. Reversible sketches for efficient and accurate change detection over network data streams. In IMC, 2004.
12. R. Schweller, Z. Li, Y. Chen, et al. Reverse hashing for high-speed network monitoring: Algorithms, evaluation, and applications. In Proc. of IEEE Infocom, 2006.
13. S. Venkataraman, D. Song, P. Gibbons, and A. Blum. New streaming algorithms for superspreader detection. In the Annual Network and Distributed System Security Symposium (NDSS), 2005.
14. Vinod et al. Internet intrusions: Global characteristics and prevalence. In Proc. of ACM SIGMETRICS, 2003.
15. H. Wang, D. Zhang, and K. G. Shin. Detecting SYN flooding attacks. In Proc. of IEEE INFOCOM, 2002.
16. N. Weaver et al. Very fast containment of scanning worms. In USENIX Security Symposium. 2004.
17. Q. G. Zhao, A. Kumar, and J. J. Xu. Joint data streaming and sampling techniques for detection of super sources and destinations. In Proc. of ACM/USENIX Internet Measurement Conference, 2005.