Forensic analysis for epidemic attacks in federated networks

Proceedings - International Conference on Network Protocols, ICNP

Volumn , Issue , 2006, Pages 43-53

  Xie, Yinglian ^a   Sekar, Vyas ^a   Reiter, Michael K ^a   Zhang, Hui ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ALLIANCE (CO); DISTRIBUTED PROTOCOLS; EPIDEMIC ATTACKS; EPIDEMIC SPREADING; FORENSIC ANALYSIS; INFORMATION EXCHANGING; INTERNATIONAL CONFERENCES; MULTIPLE ADMINISTRATIVE DOMAINS; POST MORTEM ANALYSIS (PMA); TRAFFIC RECORDS;

COMPUTER CRIME; INTERNET; INTERNET PROTOCOLS; NANOSTRUCTURED MATERIALS; NETWORK ARCHITECTURE; PIPELINE PROCESSING SYSTEMS;

NETWORK PROTOCOLS;

EID: 46149120818     PISSN: 10921648     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICNP.2006.320197     Document Type: Conference Paper

References (19)

1. J. Jung, V. Paxson, A. W. Berger, and H. Balakrishnan, "Fast Portscan Detection Using Sequential Hypothesis Testing," in Proc. of IEEE Symposium on Security and Privacy, 2004.
2. D. Moore, C. Shannon, G. Voelker, and S. Savage, "Internet Quarantine: Requirements for Containing Self-Propagating Code," in Proc. of IEEE INFOCOM, 2003.
3. H. A. Kim and B. Karp, "Autograph: Toward Automated, Distributed Worm Signature Detection," in Proc. of 12th USENIX Security Symposium, 2004.
4. "Fingerprint Sharing Alliance," http://www.arbor.net/ fingerprint-sharing-alliance.php.
5. Y. Xie, V. Sekar, D. Maltz, M. K. Reiter, and H. Zhang, "Worm Origin Identification Using Random Moonwalks," in Proc. of IEEE Symposium on Security and Privacy, 2005.
6. "The Internet2 Ablilene Network," http://abilene.internet2.edu.
7. Y. Zhang and V. Paxson, "Detecting Stepping Stones," in Proc. of the 9th USENIX Security Symposium, 2001.
8. D. L. Donoho, A. G. Flesia, U. Shankar, V. Paxson, J. Coit, and S. Staniford-Chen, "Multiscale Stepping-Stone Detection: Detecting Pairs of Jittered Interactive Streams by Exploiting Maximum Tolerable Delay," in Proc. of The 5th International Symposium on Recent Advances in Intrusion Detection (RAID), 2002.
9. S. Savage, D. Wetherall, A. Karlin, and T. Anderson, "Practical Network Support for IP Traceback," in Proc. of ACM SIGCOMM, 2000.
10. H. Burch and B. Cheswick, "Tracing Anonymous Packets to Their Approximate Source," in Proc. of USENIX LISA Systems Administration Conference, 2000.
11. A. C. Snoeren, C. Partridge, L. A. Sanchez, C. E. Jones, F. Tchakountio, S. T. Kent, and W. T. Strayer, "Hash-Based IP Traceback," in Proc. of ACM SIGCOMM, 2001.
12. A. Kumar, V. Paxson, and N. Weaver, "Exploiting Underlying Structure for Detailed Reconstruction of an Internet-scale Event," Proc. of Internet Measurement Conference, 2005.
13. M. A. Rajab, F. Monrose, and A. Terzis, "Worm Evolution Tracking via Timing Analysis," in Proc. of Workshop on Rapid Malcode (WORM), 2005.
14. J. Bethencourt, J. Franklin, and M. Vernon, "Mapping Internet Sensors with Probe Response Attacks," in Proc. of the 14th USENlX Security Symposium, 2005.
15. Y. Azar, A. Fiat, A. Karlin, F. McSherry, and J. Saia, "Spectral Analysis of Data," in ACM Symposium on Theory of Computing, 2001.
16. S. Acharyya and J. Ghosh, "Outlink Estimation for Pagerank Computation under Missing Data," in Proc. of the 13th International World Wide Web Conference, 2004.
17. Z. Mao, J. Rexford, J. Wang, and R. Katz, "Towards an Accurate AS-Level Traceroute Tool," in Proc. of ACM SIGCOMM, 2003.
18. "The Route Views Project," http://www.routeviews.org.
19. Y. Xie, V. Sekar, M. Reiter, and H. Zhang, "Forensic Analysis for Epidemic Attacks in Federated Networks," CyLab, Carnegie Mellon University, Tech. Rep. CMU-CyLab-06-014, 2006.