A real-time algorithm to detect long connection chains of interactive terminal sessions

ACM International Conference Proceeding Series

Volumn 85, Issue , 2004, Pages 198-203

  Yang, Jianhua ^a   Huang, Shou Hsuan Stephen ^a  

^a University of Houston ^*  (United States)

Author keywords

Connection chain; Interactive terminal session; Intrusion detection; Network security; Stepping stone

Indexed keywords

CONNECTION CHAIN; INCOMING CONNECTIONS; INTERACTIVE TERMINAL SESSION; REAL TIME ALGORITHMS; ROUND-TRIP TIME; STEPPING STONE; TARGET COMPUTERS;

ALGORITHMS; CHAINS; COMPUTER CRIME; INTRUSION DETECTION; MOBILE TELECOMMUNICATION SYSTEMS; PERSONAL COMPUTING;

NETWORK SECURITY;

EID: 77952908143     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1046290.1046331     Document Type: Conference Paper

References (11)

1. Yin Zhang and Vern Paxson. "Detecting stepping stones," Proceedings of the 9th USENIX Security Symposium, Pages 67-81. Denver, CO. August 2000.
2. Stuart Staniford-Chen and L. Todd Heberlein. "Holding Intruders Accountable on the Internet," Proceedings of the 1995 IEEE Symposium on Security and Privacy, Pages 39-49. Oakland, CA, May 1995.
3. Kwong H. Yung, "Detecting Long Connecting Chains of Interactive Terminal Sessions," RAID 2002, LNCS 2516, Pages 1-16, 2002.
4. Z. J. Tang Designing and Implementing of Network Intrusion Detection System (in Chinese). Pages 13-24, Publishing House of Electronics Industry of China.
5. Behrouz Forouzan, TCP/IP Protocol Suite (Second Edition). McGraw-Hill, June 2002.
6. Lawrence Berkeley National Laboratory (LBNL), "The Packet Capture library, " ftp://ftp.ee.lbl.gov/libpcap.tar.z, accessed March 2004.
7. DataNerds Web Site, hltp://www.datanerds.net, accessed March 2004.
8. D. Cheriton, "VMTP: Versatile Message Transaction Protocol", RFC 1045, Stanford University, February 1988.
9. J. Postel, "Transmission Control Protocol - DARPA Internet Program Protocol Specification", RFC 793, DARPA, September 1981.
10. D. Clark, M. Lambert, and L. Zhang, "NETBLT: A Bulk Data Transfer Protocol", RFC 998, MIT, March 1987.
11. University of Southern California, "Transmission Control Protocol", RFC 793, September 1981.