Distack - a framework for anomaly-based large-scale attack detection

Proceedings - 2nd Int. Conf. Emerging Security Inf., Systems and Technologies, SECURWARE 2008, Includes DEPEND 2008: 1st Int. Workshop on Dependability and Security in Complex and Critical Inf. Sys.

Volumn , Issue , 2008, Pages 34-40

  Gamer, Thomas ^a   Mayer, Christoph P ^a   Zitterbart, Martina ^a  

^a UNIVERSITY OF KARLSRUHE   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; INTERNET;

ANOMALY DETECTION METHODS; ATTACK DETECTIONS; DETECTION METHODS; EXISTING SYSTEMS; INTERNET INFRASTRUCTURES; NETWORK SIMULATORS; RUNTIME ENVIRONMENTS; SERVICE ATTACKS;

SIGNAL DETECTION;

EID: 55849097730     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECURWARE.2008.8     Document Type: Conference Paper

References (24)

1. Arbor Networks. Worldwide Infrastructure Security Report. http://www.arbornetworks.com/report, Sept. 2007.
2. G. Carl, G. Kesidis, R. Brooks, and S. Rai. Denial-of-Service Attack-Detection Techniques. IEEE Internet Computing, 10(1):82-89, Jan. 2006.
3. C. Douligeris and A. Mitrokotsa. DDoS Attacks and Defense Mechanisms: Classification and State-of-the-Art. Computer Networks, 44(5):643-666, Apr. 2004.
4. F. Dressler, G. Münz, and G. Carle. CATS: Cooperating Autonomous Detection Systems. In 1st IFIP TC6 WG6.6 International Workshop on Autonomic Communication, Oct. 2004.
5. D. Frincke and E. Wilhite. Distributed Network Defense. In Proc. of the IEEE Workshop on Information Assurance and Security, pages 236-238, June 2001.
6. T. Gamer and M. Scharf. Realistic Simulation Environments for IP-based Networks. In Dig. Proc. of the OMNeT++ Workshop, Mar. 2008.
7. T. Gamer, M. Schöller, and R. Bless. An extensible and flexible System for Network Anomaly Detection. In Proc. of Autonomic Networking, pages 97-108, Sept. 2006.
8. R. Janakiraman, M. Waldvogel, and Q. Zhang. Indra: A peer-to-peer approach to network intrusion detection and prevention. In Proc. of IEEE WETICE, pages 226-231, June 2003.
9. I. V. Kotenko and A. Ulanov. Simulation of Internet DDoS Attacks and Defense. In Proc. of ISC, pages 327-342, Oct. 2006.
10. A. Lakhina, M. Crovella, and C. Diot. Mining Anomalies using Traffic Feature Distributions. ACM SIGCOMM Computer Communication Review, 35(4):217-228, Oct. 2005.
11. Z. M. Mao. Analyzing Large DDoS Attacks Using Multiple Data Sources. In Proc. of the SIGCOMM Workshop on Large-scale Attack Defense, pages 161-168, Sept. 2006.
12. R. Ramey. Boost Serialization Library. http://www.boost.org/libs/ seriahzation, 2002.
13. H. Ringberg, M. Roughan, and J. Rexford. The Need for Simulation in Evaluating Anomaly Detectors. SIGCOMM Computer Communication Review, 38(l):55-59, Jan. 2008.
14. M. Roesch. Snort, http://www.snort.org, 2001.
15. D. Schnackengerg, H. Holliday, R. Smith, K. Djahandari, and D. Sterne. Cooperative Intrusion Traceback and Response Architecture (CITRA). In Proc. of DARPA Information Survivability Conference & Exposition II, pages 56-68, June 2001.
16. H. Schulzrinne and R. Hancock. GIST: General Internet Signaling Transport. Internet-Draft, IETF, 2007. Work in Progess.
17. V. Sekar. LADS: Large-scale Automated DDoS detection System. In Proc. of USENIX Technical Conference, pages 171-184, June 2005.
18. R. Sommer. Bro: An Open Source Network Intrusion Detection System. In Proc. of the 17th DFN-Arbeitstagung über Kommunikationsnetze, pages 273-288, June 2003.
19. A. Varga. The OMNeT++ Discrete Event Simulation System. In Proc. of the European Simulation Multiconference, pages 319-324, June 2001.
20. G. Vigna, F. Valeur, and R. Kemmerer. Designing and Implementing a Family of Intrusion Detection Systems. In Proc. of 9th European Software Engineering Conference, pages 88-97, Sept. 2003.
21. Y. Xu. Statistically Countering Denial of Service Attacks. In Proc. of IEEE International Conference on Communications, volume 2, pages 844-849, May 2005.
22. K. Zaraska. Prelude IDS: current state and development perspectives. http://www.prelude-ids.org, 2003.
23. C. C. Zou. The Monitoring and Early Detection of Internet Worms. IEEE/ACM Transactions on Networking, 13(5):961-974, Oct. 2004.
24. T. Zseby, M. Molina, F. Raspall, N. G. Duffield, and S. Niccolini. Sampling and Filtering Techniques for IP Packet Selection. Internet Draft, June 2007. Work in Progress.