Proactive detection of distributed denial of service attacks using MIB traffic variables-a feasibility study

2001 7th IEEE/IFIP International Symposium on Integrated Network Management Proceedings: Integrated Management Strategies for the New Millennium

Volumn , Issue , 2001, Pages 609-622

  Cabrera, J B D ^a   Lewis, L ^b   Qin, Xinzhou ^c   Lee, Wenke ^c   Prasanth, R K ^a   Ravichandran, B ^a   Mehra, R K ^a  

^a Scientific Systems Company   (United States)

^b Aprisma Management Technologies   (United States)

^c North Carolina State University   (United States)

Author keywords

Computer crime; Computer network management; Data security; Information security; Intrusion detection; Monitoring; Samarium; Technology management; Testing; USA Councils

Indexed keywords

COMPUTER CRIME; COMPUTER NETWORKS; INFORMATION MANAGEMENT; INTRUSION DETECTION; MONITORING; NETWORK MANAGEMENT; NETWORK SECURITY; SAMARIUM; SECURITY OF DATA; STATISTICAL TESTS; TESTING; TRANSMISSION CONTROL PROTOCOL;

AUTOMATED PROCEDURES; DISTRIBUTED DENIAL OF SERVICE ATTACK; FEASIBILITY STUDIES; MANAGEMENT INFORMATION BASE; NETWORK MANAGEMENT SYSTEMS; STATISTICAL SIGNATURES; TECHNOLOGY MANAGEMENTS; USA COUNCILS;

DENIAL-OF-SERVICE ATTACK;

EID: 51149105210     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INM.2001.918069     Document Type: Conference Paper

References (16)

1. K. Boudaoud, H. Labiod, R. Boutaba, and Z. Guessoum. Network Security Management with Intelligent Agents. Proceedings of NOMS, 2000. IEEE Publishing.
2. J. B. D. Cabrera, B. Ravichandran, and R. K. Mehra. Statistical Traffic Modeling for Network Intrusion Detection. In Proceedings of the Eighth International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunications Systems, pages 466-473, San Francisco, CA, August 2000. IEEE Computer Society.
3. P. J. Criscuolo. Distributed Denial of Service - Trin00, Tribe Flood Network, Tribe Flood Network 2000, and Stacheldraht. Technical Report CIAC-2319, Department of Energy - CIAC (Computer Incident Advisory Capability), February 2000.
4. Z. Fu, H. Huang, T. Wu, S. Wu, F. Gong, C. Xu, and I. Baldine. ISCP: Design and Implementation of an Inter-Domain Security Management Agent (SMA) Coordination Protocol. Proceedings of NOMS, 2000. IEEE Publishing.
5. C. W. J. Granger. Investigating causal relations by econometric models and cross-spectral methods. Econometrica, 34:424-438, 1969.
6. J. Hamilton. Time Series Analysis. Princeton University Press, 1994.
7. K. Kendall. A database of computer attacks for the evaluation of intrusion detection systems. Master's thesis, Massachusetts Institute of Technology, June 1999.
8. W. Lee, S. J. Stolfo, and K. W. Mok. A data mining framework for building intrusion detection models. In Proceedings of the IEEE Symposium on Security and Privacy, 1999.
9. R. K. Mehra, K. M. Nagpal, and R. K. Prasanth. Deterministic-stochastic realization algorithms (DSRA). Technical report, Scientific Systems Company, Inc., 1997.
10. B. Mukherjee, L. T. Heberlein, and K. N. Levitt. Network intrusion detection. IEEE Network, 8(3):26-41, May 1994.
11. P. van Overschee and B. De Moor. Subspace Identification for Linear Systems. Kluwer Academic Publishers, Norwell, MA, 1996.
12. Science and Technology Section. Internet Security - Anatomy of an Attack. The Economist, February 19, 2000, pages 80-81.
13. W. R. Stevens. TCP/IP Illustrated, Vol. 1: The Protocols. Addison-Wesley, 1994.
14. M. Subramanian. Network Management - Principles and Practice. Addison-Wesley, 2000.
15. M. Thottan and C. Ji. Proactive anomaly detection using distributed agents. IEEE Network, pages 21-27, September 1998.
16. F. Zhang and J. Hellerstein. An Approach to On-Line Predictive Detection. In Proceedings of the Eighth International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunications Systems, pages 549-556, San Francisco, CA, August 2000. IEEE Computer Society.