Improving host profiling with bidirectional flows

Proceedings - 12th IEEE International Conference on Computational Science and Engineering, CSE 2009

Volumn 3, Issue , 2009, Pages 231-237

  Minařik, Pavel ^a   Vykopal, Jan ^a   Krmícek, Vojtěch ^a  

^a MASARYK UNIVERSITY   (Czech Republic)

Author keywords

behavior profiling; Bidirectional flows; Network traffic analysis

Indexed keywords

BI-DIRECTIONAL FLOWS; CAMPUS NETWORK; DATA QUALITY; FLOW MONITORING; NETFLOWS; NETWORK DEVICES; NETWORK TRAFFIC ANALYSIS; SIDE EFFECT; TIME STAMPS; UNIDIRECTIONAL FLOW;

INTERNET; MONITORING; NETWORK SECURITY;

SENSOR NETWORKS;

EID: 70849127416     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSE.2009.23     Document Type: Conference Paper

References (22)

1. Argus homepage. http://qosient.com/argus/2009.
2. Manual page of yet another flowmeter. http://tools.netsa.cert.org/yaf/ yaf.1.pdf, 2009.
3. Silk documentation. http://tools.netsa.cert.org/silk/silkdocs.html, 2009.
4. AdvaICT, a.s. MyNetScope Platform - Product Page. http://www.advaict.com/ mynetscope.
5. Agent Technology Group, Gerstner Laboratory, Czech Technical University in Prague and Institute of Computer Science, Masaryk University in Brno. CAMNEP (Cooperative Adaptive Mechanism for NEtwork Protection) project web page. http://http://agents.felk.cvut.cz/projects/camnep.
6. Tarem Ahmed, Mark Coates, and Anukool Lakhina. Multivariate online anomaly detection using kernel recursive least squares. In INFOCOM, pages 625-633, 2007. (Pubitemid 47334279)
7. Elisa Boschi and Brian Trammell. Bidirectional Flow Measurement, IPFIX, and Security Analysis. FloCon 2006, 2006.
8. N. Brownlee, C. Mills, and G. Ruth. Traffic Flow Measurement: Architecture. RFC 2722 (Informational), October 1999.
9. Cisco Systems. Cisco IOS NetFlow. http://www.cisco.com/go/netflow, 2007.
10. B. Claise. Cisco Systems NetFlow Services Export Version 9. RFC 3954 (Informational), October 2004.
11. Tomas Dymacek, Petra Hocová, and Miroslav Kintr. Adaptable visualization service: through uniformity towards sustainability. In Model Driven Interoperability for Sustainable Information Systems (MDISIS' 08), Montpellier, France, 2008.
12. Tomas Dymacek and Pavel Minarik. Netflow data visualization based on graphs. In Visualization for Computer Security, 5th International Workshop, VizSEC 2008 Proceedings, pages 144-151, 2008.
13. Peter Haag. NfSen - NetFlow Sensor. http://nfsen.sourceforge.net, 2007.
14. INVEA-TECH Inc. INVEA-TECH Inc. Company Profile. http://www.invea.cz/ main/home.
15. Thomas Karagiannis, Konstantina Papagiannaki, Nina Taft, and Michalis Faloutsos. Profiling the end host. In PAM 2007, pages 186-196, 2007.
16. Ramana Rao Kompella, Sumeet Singh, and George Varghese. On scalable attack detection in the network. In IMC '04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, pages 187-200, New York, NY, USA, 2004. ACM.
17. Mycroft Mind Inc. NetFlow Visualizer. http://www.mycroftmind.com/ products:nfvis.
18. B. Trammell and E. Boschi. Bidirectional Flow Export Using IP Flow Information Export (IPFIX). RFC 5103 (Proposed Standard), January 2008.
19. Pavel Čeleda, Milan Kovaćǐk, Tomáš Końiř, Vojtěch Krḿǐcek, Petr Špringl, and Martin Žádník. FlowMon Probe. Technical Report 31/2006, CESNET, z. s. p. o., 2006. http://www.cesnet.cz/doc/techzpravy/2006/flowmon- probe.
20. Jan Vykopal, Tomáš Plesník, and Pavel Minařík. Validation of networkbased dictionary attack detection. In Proceedings of SPI 2009: Security and Protection of Information (to appear), 2009.
21. David Watson, Matthew Smart, G. Robert Malan, and Farnam Jahanian. Protocol scrubbing: Network security through transparent flow modification. DARPA Information Survivability Conference and Exposition, 2:1108, 2001.
22. Songjie Wei, Jelena Mirkovic, and Ezra Kissel. Profiling and clustering internet hosts. In DMIN, pages 269-275. CSREA Press, 2006.