Combining Multiple Intrusion Detection and Response Technologies in an Active Networking Based Architecture

Lecture Notes in Informatics (LNI), Proceedings - Series of the Gesellschaft fur Informatik (GI)

Volumn P-44, Issue , 2003, Pages 153-165

  Hess, A ^a   Jung, M ^a   Schafer G ^a  

^a TECHNISCHE UNIVERSITÄT BERLIN   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; NETWORK SECURITY;

ACTIVE FIELD; ACTIVE NETWORKING; DEFENCE TECHNOLOGY; INTRUSION DETECTION AND RESPONSE; INTRUSION DETECTION TECHNOLOGIES; ISOLATED OPERATION; MALICIOUS ATTACK; NETWORK INTRUSION DETECTION; POTENTIAL SOURCES; SPECIFIC STRENGTH;

INTRUSION DETECTION;

EID: 72849153369     PISSN: 16175468     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. +02] K. G. Anagnostakis, S. Ioannidis, S. Miltchev, J. Ioannidis, Michael B. Greenwald, and J. M. Smith. Efficient Packet Monitoring for Network Management. In Proceedings of IFIP/IEEE Network Operations and Management Symposium (NOMS) 2002, April 2002.
2. [Amo99] Edward Amoroso. Intrusion Detection: An Introduction to Internet Surveillance, Correlation, Trace Back, Traps, and Response. Intrusion Net Books, 1999.
3. [Axe99] Stefan Axelsson. The Base-Rate Fallacy and Its Implications for the Difficulty of Intrusion Detection. In ACM Conference on Computer and Communications Security, pages 1–7, 1999.
4. [BAMF01] H. K. Browne, W. A. Arbaugh, J. McHugh, and W. L. Fithen. A trend analysis of exploitations. In Francis M. Titsworth, editor, Proceedings of the 2001 IEEE Symposium on Security and Privacy, pages 214–231, Los Alamitos, CA, May 14–16 2001. IEEE Computer Society.
5. [ea] W. La Cholter et al. IBAN: Intrusion Blocker based on Active Networks. In Proc. of Dance 2002.
6. [ea02] Dan Sterne et al. Active Network Based DDoS Defense. In Proc. of Dance 2002, 2002.
7. [Gio] Coretez Giovanni. Fun with Packets: Designing a Stick. http://www.eurocompton.net/stick/papers/Peopledos.pdf.
8. [HJS03] A. Hess, M. Jung, and G. Schäfer. FIDRAN: A flexible Intrusion Detection and Response Framework for Active Networks. In Symposium on Computers and Communications (ISCC’2003), 2003. accepted for publication.
9. [HS03] A. Hess and G. Schaefer. A Flexible and Dynamic Access Control Policy Framework for an Active Networking Environment. In Proc. of Kommunikation in Verteilten Systemen (KiVS 2003), Leipzig, Germany, February 2003. accepted for publication.
10. +02] A. Hess, M. Schoeller, G. Schaefer, M. Zitterbart, and A. Wolisz. A dynamic and flexible Access Control and Resource Monitoring Mechanism for Active Nodes. In Short Paper Proc. of OpenArch 2002, pages 11–16, New York, USA, June 2002.
11. [ipe] IPerf. http://dast.nlanr.net/Projects/Iperf/.
12. +00] Richard Lippmann, David Fried, Isaac Graf, Joshua Haines, Kristopher Kendall, David McClung, Dan Weber, Seth Webster, Dan Wyschogrod, Robert Cunningham, and Marc Zissman. Evaluating Intrusion Detection Systems: The 1998 DARPA Off-line Intrusion Detection Evaluation. In Proceedings of the DARPA Information Survivability Conference and Exposition, Los Alamitos, CA, 2000. IEEE Computer Society Press.
13. [nim] Nimda Attack. http://www.cert.org/advisories/CA-2001-26.html.
14. [NN01] D. Northcutt and J. Novak. Network Intrusion Detection – An Analyst’s Handbook. New Riders, 2001.
15. [Pro01] The Honeynet Project. Know Your Enemy. Addison Wesley, 2001.
16. [PYD] Samuel Patton, William Yurcik, and David Doss. An Achilles’ Heel in Signature-Based IDS: Squealing False Positives in SNORT.
17. [SC] S. Staniford-Chen. Common Intrusion Detection Framework. http://www.isi.edu/gost/cidf/.
18. [SJ] Grim G. Staniford, S. and R. Jonkman. Flash Worms: Thirty Seconds to Infect the Internet. http://www.silicondefense.com/flash/.
19. [SN02] Scott Winters Karen Kent Frederick Ronald W. Ritchey Stephen Northcutt, Lenny Zeltser. Network Perimeter Security. New Riders, 2002.
20. [snoa] Snort. http://www.snort.org.
21. [snob] Snort-Inline. http://www.honeynet.org/papers/honeynet/tools/.
22. [Spi02] Lance Spitzner. Tracking Hackers. Addison Wesley, 2002.
23. [Wea] Nicholas C Weaver. Warhol Worms: The Potential for Very Fast Internet Plagues. http://www.cs.berkeley.edu/nweaver/warhol.html.