Experience using active and passive mapping for network situational awareness

Proceedings - Fifth IEEE International Symposium on Network Computing and Applications, NCA 2006

Volumn 2006, Issue , 2006, Pages 19-26

  Webster, Seth ^a   Lippmann, Richard ^a   Zissman, Marc ^a  

^a MIT LINCOLN LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPLIMENTARY INFORMATION; PASSIVE SYSTEM;

CONFORMAL MAPPING; INFORMATION ANALYSIS; SYSTEMS ANALYSIS;

PASSIVE NETWORKS;

EID: 34247248337     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NCA.2006.23     Document Type: Conference Paper

References (16)

1. Fydor, "The Art of Port Scanning," Phrack Magazine, vol. 7, Sept. 1997.
2. "Nessus Security Scanner." http://www.nessus.org.
3. The Subterrain Security Group, "Siphon Project," 2000. http://siphon.datanerds.net.
4. M. Zalewski, "the new pOf: 2.0.5," 2004. http://icamtuf. coredump.es/p0f.shtml.
5. A. Ornaghi and M. Valleri, "Ettercap NG," 2004. http://ettercap.sourceforge.net.
6. R. Gula, R. Deraison, and T. Hayton, "Passive Vulnerability Scanning," tech. rep., Tenable Network Security, Aug. 2003. http://www.tenablesecurity.com/images/pdfs/passive_scanning_tenable.pdf.
7. Sourcefire, "RNA Sensor," 2004. http://www.sourcefire.com/ products/rna.html.
8. V. Paxson, "Empirically-Derived Analytic Models of Wide Area TCP Connections," IEEE/ACM Transactions on Networking, vol. 2, no. 4, pp. 216-336, 1994.
9. S. Sen and J. Wang, "Analyzing Peer-to-Peer Traffic Across Large Networks," IEEE/ACM Transactions on Networking, vol. 12, no. 2, pp. 219-232, 2004.
10. L. Deri and S. Suin, "Ntop: Beyond Ping and Traceroute," Proceedings of DSOM '99, Oct. 1999.
11. th International Symposium on Computer and Information Sciences, 2001. http://www.dayioglu.net/publications/iscis2001.pdf.
12. R. Lippmann, D. Fried, K. Piwowarski, and W. Streilein, "Passive Operating System Identification From TCP/IP Packet Headers," Workshop on Data Mining for Computer Security, 2004.
13. J. Kuntzelman, "Comparative Analysis of Active and Passive Mapping Techniques In an Internet-based Local Area Network," Master's thesis, Air Force Institute of Technology, Sept. 2004.
14. A. de Montigny-Leboeuf and F. Massicotte, "Passive Network Discovery for Real Time Situation Awareness," Proceedings of the RTO IST Symposium on Adaptive Defence in Unclassified Networks, 2004.
15. M. Crovella and A. Bestavros, "Self-Similarity in World Wide Web Traffic Evidence and Possible Causes," IEEE/ACM Transactions on Networking, 1996.
16. The SANS Institute, "Survival Time History." http://isc.sans.org/survivalhistory.php.