An active intrusion detection system for LAN specific attacks

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6059 LNCS, Issue , 2010, Pages 129-142

  Hubballi, Neminath ^a   Roopa, S ^a   Ratti, Ritesh ^a   Barbhuiya, F A ^a   Biswas, Santosh ^a   Sur, Arijit ^a   Nandi, Sukumar ^a   Ramachandran, Vivek ^a  

^a INDIAN INSTITUTE OF TECHNOLOGY GUWAHATI   (India)

Author keywords

Address Resolution Protocol; Intrusion Detection System; LAN Attack

Indexed keywords

ACTIVE DETECTION; ADDRESS RESOLUTION PROTOCOL; INTRUSION DETECTION SYSTEMS; NETWORK TRAFFIC; OPERATING SYSTEMS; PROBING TECHNIQUES;

COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; EQUIPMENT TESTING; INTERNET PROTOCOLS; LOCAL AREA NETWORKS;

INTRUSION DETECTION;

EID: 77954569379     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-13577-4_11     Document Type: Conference Paper

References (15)

1. Held, G.: Ethernet Networks: Design, Implementation, Operation, Management, 1st edn. John Wiley & Sons, Ltd., Chichester (2003)
2. Kozierok, C.M.: TCP/IP Guide, 1st edn. No Starch Press (October 2005)
3. Cisco Systems PVT LTD: Cisco 6500 catalyst switches
4. Arpwatch, http://www.arpalert.org
5. Arpdefender, http://www.arpdefender.com
6. Colasoft capsa, http://www.colasoft.com
7. Snort: Light weight intrusion detection, http://www.snort.org
8. Abad, C.L., Bonilla, R.I.: An analysis on the schemes for detecting and preventing arp cache poisoning attacks. In: ICDCSW 2007: Proceedings of the 27th International Conference on Distributed Computing Systems Workshops, Washington, DC, USA, pp. 60-67. IEEE Computer Society, Los Alamitos (2007)
9. Hsiao, H.W., Lin, C.S., Chang, S.Y.: Constructing an arp attack detection system with snmp traffic data mining. In: ICEC 2009: Proceedings of the 11th International Conference on Electronic Commerce, pp. 341-345. ACM, New York (2009)
10. Gouda, M.G., Huang, C.T.: A secure address resolution protocol. Comput. Networks. 41(1), 57-71 (2003)
11. Lootah,W., Enck,W., McDaniel, P.: Tarp: Ticket-based address resolution protocol, pp. 106- 116. IEEE Computer Society, Los Alamitos (2005)
12. Ramachandran, V., Nandi, S.: Detecting arp spoofing: An active technique. In: Jajodia, S., Mazumdar, C. (eds.) ICISS 2005. LNCS, vol. 3803, pp. 239-250. Springer, Heidelberg (2005)
13. Trabelsi, Z., Shuaib, K.: Man in the middle intrusion detection. In: Globecom, San Francisco, California, USA, pp. 1-6. IEEE Communication Society, Los Alamitos (2006)
14. Sisaat, K., Miyamoto, D.: Source address validation support for network forensics. In: JWICS '06: The 1st Joint Workshop on Information security, pp. 387-407 (2006)
15. CISCO Whitepaper, http://www.cisco.com