Security against probe-response attacks in collaborative intrusion detection

Proceedings of the 2007 Workshop on Large Scale Attack Defense, LSAD '07

Volumn , Issue , 2007, Pages 129-136

  Shmatikov, Vitaly ^a   Wang, Ming Hsiu ^a  

^a UNIVERSITY OF TEXAS AT AUSTIN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COLLABORATIVE DETECTION; COLLABORATIVE INTRUSION DETECTION SYSTEM; COLLABORATIVE NETWORK; DEFENSIVE CAPABILITIES; SYSTEM SUPPORTS;

COMPUTER CRIME; DETECTORS; PROBES;

INTRUSION DETECTION;

EID: 67349147317     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1352664.1352673     Document Type: Conference Paper

References (23)

1. M. Allman, E. Blanton, V. Paxson, and S. Shenker. Fighting coordinated attackers with cross-organizational information sharing. In Proc. HotNets, 2006.
2. K. Anagnostakis, M. Greenwald, S. Ioannidis, A. Keromytis, and D. Li. A cooperative immunization system for an untrusting Internet. In Proc. ICON, 2003.
3. J. Bethencourt, J. Franklin, and M. Vernon. Mapping Internet sensors with probe response attacks. In Proc. USENIX Security, 2005.
4. CAIDA. http://www.caida.org, 2007.
5. S. Cheetancheri, J. Agosta, D. Dash, K. Levitt, J. Rowe, and E. Schooler. A distributed host-based worm detection system. In Proc. LSAD, 2006.
6. H. Debar and A. Wespi. Aggregation and correlation of intrusion-detection alerts. In Proc. RAID, 2001.
7. J. Douceur. The Sybil attack. In Proc. IPTPS, 2002.
8. DShield. http://www.dshield.org, 2006.
9. Internet Motion Sensor. http://ims.eecs.umich.edu/, 2006.
10. V. King, S. Lewis, and J. Saia. On algorithms for choosing a random peer. Technical Report TR-CS-2004-2031, Dept. of Computer Science, University of New Mexico, 2005.
11. C. Krügel, T. Toth, and C. Kerer. Decentralized event correlation for intrusion detection. In Proc. ICISC, 2001.
12. Z. Li, Y. Chen, and A. Beach. Towards scalable and robust distributed intrusion alert fusion with good load balancing. In Proc. LSAD, 2006.
13. P. Lincoln, P. Porras, and V. Shmatikov. Privacy-preserving sharing and correlation of security alerts. In Proc. USENIX Security, 2004.
14. M. Locasto, J. Parekh, A. Keromytis, and S. Stolfo. Towards collaborative security and P2P intrusion detection. In Proc. IAW, 2005.
15. D. Malan and M. Smith. Host-based detection of worms through peer-to-peer cooperation. In Proc. WORM, 2005.
16. R. Morris, D. Karger, F. Kaashoek, and H. Balakrishnan. Chord: A scalable peer-to-peer lookup service for Internet applications. In Proc. SIGCOMM, 2001.
17. myNetWatchman. http://www.mynetwatchman.com, 2006.
18. A. Nambiar and M. Wright. Salsa: a structured approach to large-scale anonymity. In Proc. CCS, 2006.
19. p2psim. http://pdos.csail.mit.edu/p2psim/, 2005.
20. J. Parekh, K. Wang, and S. Stolfo. Privacy-preserving payload-based correlation for accurate malicious traffic detection. In Proc. LSAD, 2006.
21. Y. Shinoda, K. Ikai, and M. Itoh. Vulnerabilities of passive Internet threat monitors. In Proc. USENIX Security, 2005.
22. Symantec. DeepSight threat management system. http://tms.symantec.com, 2006.
23. V. Yegneswaran, P. Barford, and S. Jha. Global intrusion detection in the DOMINO overlay system. In Proc. NDSS, 2004.