Real-time visualization of network attacks on high-speed links

IEEE Network

Volumn 18, Issue 5, 2004, Pages 30-39

  Kim, Hyogon ^a   Kang, Inhye ^b   Bahk, Saewoong ^c  

^a Korea University   (South Korea)

^b University of Seoul   (South Korea)

^c Seoul National University   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; COMPUTER WORMS; ERROR DETECTION; GRAPH THEORY; PACKET NETWORKS; QUALITY OF SERVICE; TELECOMMUNICATION LINKS; TELECOMMUNICATION SERVICES; TELECOMMUNICATION TRAFFIC; THREE DIMENSIONAL;

DENIAL-OF-SERVICE (DOS); FAST ATTACT DETECTION; HIGH SPEED LINKS; INTERNET PROVIDER; NETWORK ATTACKS; TRAFFIC FLOWS;

INTERNET;

EID: 6444229776     PISSN: 08908044     EISSN: None     Source Type: Journal    
DOI: 10.1109/MNET.2004.1337733     Document Type: Article

References (19)

1. P. Vixie (ISC), G. Sneeringer, and M. Schleifer, "Events of 21-Oct-2002," http://www.isc.org/index.pl?/ops/f-root /october21.txt, Nov. 2002.
2. CAIDA, "CAIDA Analysis of Code Red," http://www.caida.org /analysis/security/code-red/coderedv2∠alysis.xml, July 2001.
3. CAIDA, "Analysis of the Sapphire Worm," http://www.caida.org /analysis/security/sapphire/, Jan. 30, 2003.
4. IP Monitoring Project at Sprint, http://ipmon.sprint.com/ipmon.php
5. K. Houle and G. Weaver, "Trends in Denial of Service Technology," CERT Coordination Center, Oct. 2001; available at http://www.cert.org/archive/pdf/DoS_trends.pdf
6. H. Kim, "Fast Classification, Calibration, and Visualization of DoS and Scan Attacks for Backbone Links," Technical Report, June 2003, http://net.korea.ac.kr/papers/RADAR.html
7. IANA, "Internet Protocol v4 Address Space," http:/ /www.iana.org/assignments/ipv4-address-space
8. F. Baker, "Requirements for IP Version 4 Routers," RFC 1812, June 1995.
9. H. Kim and I. Kang, "On the Effectiveness of Martian Address Filtering and its Extensions," Proc. IEEE GLOBECOM 2003, Dec. 2003.
10. D. Moore, G. Voelker, and S. Savage, "Inferring Internet Denial-of-Service Activity," Proc. 2001 USENIX Security Symp.
11. M. Garetto, G. Gong, and D. Towsley, "Modeling Malware Spreading Dynamics," Proc. IEEE INFOCOM 2003, Mar. 2003.
12. D. Moore et al., "Internet Quarantine: Requirements for Containing Self-Propagating Code," Proc. IEEE INFOCOM 2003, Mar. 2003.
13. http://shoki.sourceforge.net/hustler/.
14. D. Plonka, "Flowscan: A Network Traffic Flow Reporting and Visualization Tool," Proc. 2000 USENIX LISA.
15. C. Estan, S. Savage, and Varghese, "Automatically Inferring Patterns of Resource Consumption in Network Traffic," Proc. ACM Sigcomm 2003, pp. 137-48.
16. Etherape, http://etherape.sourceforge.net
17. Mazu Network Profiler, http://www.mazunetworks.com
18. Open Network SecurityThreatManager, http://www.open.com
19. Arbor Networks Peakflow, http://www.arbornetworks.com