Network traffic analysis using refined bayesian reasoning to detect flooding and port scan attacks

Proceedings - 2008 International Conference on Advanced Computer Theory and Engineering, ICACTE 2008

Volumn , Issue , 2008, Pages 1000-1004

  Liu, Dai Ping ^a   Zhang, Ming Wei ^a   Li, Tao ^a  

^a WUHAN UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET; REFINING;

BAYES KERNELS; BAYES METHODS; BAYESIAN REASONINGS; CURRENT STATUS; DYNAMICAL ANALYSIS; KERNEL ESTIMATORS; LARGE-SCALE INTRUSIONS; NETWORK STATUS; NETWORK TRAFFIC ANALYSIS; PORT SCANS; REAL TIME; TRAFFIC FEATURES;

PARAMETER ESTIMATION;

EID: 62949214093     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICACTE.2008.44     Document Type: Conference Paper

References (10)

1. A. W. Moore and D. Zuev. Internet traffic classification using Bayesian analysis techniques. In Proceedings of ACM Sigmetrics, pages 50-60, 2005.
2. H. Jiang, A. W. Moore, Z. Ge, S. Jin and J. Wang. Lightweight Application Classification for Network Management. INM'07, 2007.
3. S. Noh, G. Jung, K. Choi, and C. Lee, Compiling network traffic into rules using soft computing methods for the detection of flooding attacks, Applied Soft Computing, 2007, pp. 1200-1210.
4. A.B. Kulkarni, S.F. Bush, S.C. Evans, Detecting Distributed DoS Attacks Using Kolmogorov Complexity Metrics, Technical Report 2001CRD176, GE Research and Development Center, 2001.
5. J. Chou, B. Lin, Subhabrata Sen, and O. Spatscheck, Minimizing Collateral Damage by Proactive Surge Protection. In SIGCOMM LSAD. 2007.
6. F. Kargl, J. Maier, M. Weber, Protecting web servers from distributed Denial of service attacks, in: Proceedings of the 10th International Conference on World Wide Web, 2001, pp. 514-524.
7. M Li, W Jia, W Zhao, Decision Analysis of Network Based Intrusion Detection Systems for Denia1-of-Service Attacks, In Proceedings, IEEE Conferences on Infotech and Infonet, 2001.
8. W E Leland, M S Taqqu, W Willinger, D Wilson. On the self-similar nature of Ethernet traffic. IEEE/ACM Tran. on Networking. 1994, 2(1):1-15.
9. P. Langley G. H. John. Estimating continuous distributions in bayesian classifiers. UAI-95, 1995.
10. Lawrence Berkeley National Laboratory's Network Research Group, libpcap: the Packet Capture library, available on-line: http://ftp.ee.lbl.gov/, 2002.