Profiling attacker behavior following SSH compromises

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2007, Pages 119-124

  Ramsbrock, Daniel ^a   Berthier, Robin ^b   Cukier, Michel ^b  

^a University of Maryland ^*  (United States)

^b UNIVERSITY OF MARYLAND   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

LINUX; PASSWORDS; PROFILING ATTACKER; SUCCESSFUL ATTEMPTS;

CODES (SYMBOLS); COMPUTER APPLICATIONS; COMPUTER OPERATING SYSTEMS;

SECURITY SYSTEMS;

EID: 36049038314     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2007.76     Document Type: Conference Paper

References (13)

1. S. Panjwani, S. Tan, K. Jarrin, and M. Cukier, "An Experimental Evaluation to Determine if Port Scans are Precursors to an Attack", in Proc. International Conference on Dependable Systems and Networks (DSN05), Yokohama, Japan, June 28-July 1, 2005, pp. 602-611.
2. http://www.honeynet.org/tools/sebek/
3. E. Alata, V. Nicomette, M. Kaâniche, M. Dacier, and M. Herrb, "Lessons learned from the deployment of a high-interaction honeypot", in Proc. European Dependable Computing Conference (EDCC06), Coimbra, Portugal, October 18-20, 2006, pp. 39-44.
4. L. Spitzner, "The honeynet project: Trapping the hackers", IEEE Security and Privacy, 1(2), 2003, pp. 15-23.
5. F. Raynal, Y. Berthier, P. Biondi, and D. Kaminsky, "Honeypot forensics", in Proc. IEEE Information Assurance Workshop, United States Military Academy, West Point, NY, June 10-11, 2004, pp. 22-29.
6. http://www.honeynet.org/
7. http://www.honeynet.org/papers/kye.html
8. C. Seifert, "Malicious SSH Login Attempts", August 2006, http://www.securityfocus.com/infocus/1876.
9. M. Dacier, F. Pouget, and H. Debar, "Honeypots: Practical Means to Validate Malicious Fault Assumptions," in Proc. 10th IEEE Pacific Rim International Symposium on Dependable Computing (PRDC04), Papeete, Tahiti, French Polynesia, March 3-5, 2004, pp. 383-388.
10. F. Pouget, M. Dacier, and V. H. Pham, "Understanding Threats: A Prerequisite to Enhance Survivability of Computing Systems," in Proc. International Infrastructure Survivability Workshop 2004 (IISW04), Lisbon, Portugal, December 5-8, 2004.
11. F. Pouget and M. Dacier, "Honeypot-based Forensics," in Proc. AusCERT Information Technology Security Conf. 2004 (AusCERT04), Ashmore, Australia, May 23-27, 2004.
12. F. Pouget, M. Dacier, and V. H. Pham, "Leurre.com: On the Advantages of Deploying a Large Scale Distributed Honeypot Platform," in Proc. E-Crime and Computer Conference 2005 (ECCE05), Monaco, March 29-30, 2005.
13. J. Levine, R. LaBella, H. Owen, D. Contis, and B. Culver, "The Use of Honeynets to Detect Exploited Systems Across Large Enterprise Networks," in Proc. IEEE Workshop on Information Assurance, United States Military Academy, West Point, NY, June 18-20, 2003.