Detection of information flows

IEEE Transactions on Information Theory

Volumn 54, Issue 11, 2008, Pages 4925-4945

  He, Ting ^a,b   Tong, Lang ^c  

^a Department of Obstetrics Gynecology   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

^c Cornell University   (United States)

Author keywords

Information flow; Intrusion detection and security; Network flows; Point processes and inference; Timing analysis and timing channels

Indexed keywords

ACOUSTIC NOISE; ALARM SYSTEMS; INTRUSION DETECTION; TIME MEASUREMENT;

BOUNDED MEMORIES; EXPLICIT CHARACTERIZATIONS; EXPLICIT CONSTRUCTIONS; FALSE ALARMS; INFORMATION FLOW; INFORMATION FLOWS; NETWORK FLOWS; NOISE LEVELS; NOISE THRESHOLDS; NUMBER OF HOPS; POINT PROCESSES AND INFERENCE; RELAY NODES; SAMPLE SIZES; TIMING ANALYSIS; TIMING ANALYSIS AND TIMING CHANNELS; TRANSMISSION PATTERNS; TRANSMISSION SCHEDULES;

COMPUTER NETWORKS;

EID: 49549085794     PISSN: 00189448     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIT.2008.929944     Document Type: Article

References (26)

1. D. Donoho, A. Flesia, U. Shankar, V. Paxson, J. Coit, and S. Staniford, "Multiscale stepping-stone detection: Detecting pairs of jittered interactive streams by exploiting maximum tolerable delay," in Lecture Notes in Computer Science 2516. Berlin, Germany: Springer-Verlag, 2002.
2. P. Venkitasubramaniam, T. He, and L. Tong, "Anonymous networking amidst eavesdroppers," IEEE Trans. Inf. Theory, vol. 54, Special Issue on Information-Thoeretic Security, no. 6, pp. 2770-2784, Jun. 2008.
3. S. Staniford-Chen and L. Heberlein, "Holding intruders accountable on the internet," in Proc. IEEE Symp. Security Privacy, Oakland, CA, May 1995, pp. 39-49.
4. X. Wang, D. Reeves, S. Wu, and J. Yuill, "Sleepy watermark tracing: An active network-based intrusion response framework," in Proc. 16th Int. Inf. Security Conf., 2001, pp. 369-384.
5. Y. Zhang and V. Paxson, "Detecting stepping stones," in Proc. 9th USENIX Security Symp., Aug. 2000, pp. 171-184.
6. K. Yoda and H. Etoh, "Finding a connection chain for tracing intruders," in Lecture Notes in Computer Science 1895. Berlin, Germany: Springer-Verlag, Oct. 2000.
7. X. Wang, D. Reeves, and S. Wu, "Inter-packet delay-based correlation for tracing encrypted connections through stepping stones," in Lecture Notes in Computer Science 2502. Berlin, Germany: Springer-Verlag, 2002, pp. 244-263.
8. T. He and L. Tong, "Detecting encrypted stepping-stone connections," IEEE Trans. Signal Process., vol. 55, no. 5, pp. 1612-1623, May 2007.
9. X. Wang and D. Reeves, "Robust correlation of encrypted attack traffic through stepping stones by manipulation of inter-packet delays," in Proc. ACM Conf. Comput. Commun. Security, 2003, pp. 20-29.
10. A. Blum, D. Song, and S. Venkataraman, "Detection of interactive stepping stones: Algorithms and confidence bounds," in Proc. Conf. Recent Advance Intrusion Detection, Sophia Antipolis, French Riviera, France, Sep. 2004, pp. 258-277.
11. P. Peng, P. Ning, D. Reeves, and X. Wang, "Active timing-based correlation of perturbed traffic flows with chaff packets," in Proc. 25th IEEE Int. Conf. Distributed Comput. Syst. Workshops, Columbus, OH, Jun. 2005, pp. 107-113.
12. L. Zhang, A. Persaud, A. Johson, and Y. Guan, "Detection of stepping stone attack under delay and Chaff perturbations," in Proc. 25th IEEE Int. Performance Comput. Commun. Conf., Phoenix, AZ, Apr. 2006, pp. 36-45.
13. T. He and L. Tong, "Detecting information flows: Improving chaff tolerance by joint detection," in Proc. Conf. Inf. Sci. Syst., Baltimore, MD, Mar. 2007, pp. 51-56.
14. T. He and L. Tong, "Distributed detection of information flows," IEEE Trans. Inf. Forensics Security, vol. 3, Special Issue on Statistical Methods for Network Security and Forensics, no. 3, pp. 390-403, Sep. 2008.
15. P. Venkitasubramaniam, T. He, L. Tong, and S. Wicker, "Toward an analytical approach to anonymous wireless networking," IEEE Commun. Mag., vol. 46, no. 2, pp. 140-146, Feb. 2008.
16. X. Hong, P. Wang, J. Kong, Q. Zheng, and J. Liu, "Effective probabilistic approach protecting sensor traffic," in Proc. Military Commun. Conf., Atlantic City, NJ, Oct. 2005, pp. 1-7.
17. Y. Zhu, X. Fu, B. Graham, R. Bettati, and W. Zhao, "On flow correlation attacks and countermeasures in mix networks," in Proc. Privacy Enhancing Technol. Workshop, May 26-28, 2004, pp. 207-225.
18. J. Shao, Mathematical Statistics. New York: Springer-Verlag, 1999.
19. T. He, P. Venkitasubramaniam, and L. Tong, "Packet scheduling against stepping-stone attacks with chaff," in Proc. IEEE Military Commun. Conf., Washington, DC, Oct. 2006, pp. 1-7.
20. H. V. Poor, An Introduction to Signal Detection and Estimation. New York: Springer-Verlag, 1994.
21. D. P. Bertsekas and R. Gallager, Data Networks. Englewood Cliffs, NJ: Prentice-Hall, 1992.
22. T. He, A. Agaskar, and L. Tong, "On security-aware transmission scheduling," in Proc. IEEE Int. Conf. Acoust. Speech Signal Process. Las Vegas, NV, Mar. 2008, pp. 1681-1684.
23. V. Paxson and S. Floyd, "Wide-area traffic: The failure of Poisson modeling," IEEE/ACM Trans. Netw., vol. 3, no. 3, pp. 226-244, Jun. 1995.
24. D. Cox and H. Miller, The Theory of Stochastic Processes. New York: Wiley, 1965.
25. T. Cover and J. Thomas, Elements of Information Theory. New York: Wiley, 1991.
26. F. D. Hollander, Large Deviations (Fields Institute Monographs, 14 Providence, RI: American Mathematical Society, 2000.