Analysis of credential stealing attacks in an open networked environment

Proceedings - 2010 4th International Conference on Network and System Security, NSS 2010

Volumn , Issue , 2010, Pages 144-151

  Sharma, A ^a   Kalbarczyk, Z ^a   Iyer, R ^a   Barlow, J ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Credential stealing; Incident analysis; Intrusion detection

Indexed keywords

CREDENTIAL STEALING; FORENSIC DATA; INCIDENT ANALYSIS; KEY CHARACTERISTICS; NATIONAL CENTER FOR SUPERCOMPUTING APPLICATIONS; NETWORKED ENVIRONMENTS; OPERATIONAL ENVIRONMENTS; SYSTEM LEVELS; UNIVERSITY OF ILLINOIS;

NETWORK SECURITY; SAILING VESSELS;

INTRUSION DETECTION;

EID: 78650335645     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NSS.2010.56     Document Type: Conference Paper

References (20)

1. Bank of America, "Frequently Asked Questions," http://www.bankofamerica.com/privacy/index.cfm?templatesitekey.
2. CERT, "United States Computer Emergency Readiness Team," http://www.us-cert.gov/current/archive/2008/08/27/archive.html#ssh-key-based- attacks.
3. N. Haller, The S/KEY one-time password system. RFC- 1760, 1995
4. J. Franklin, A. Perrig, V. Paxson, S. Savage, "An inquiry into the nature and causes of the wealth of internet miscreants," Proceedings of the 14th ACM conference on Computer and Communications Security, 2007. pp 375-388
5. J. Zhou, M. Heckman, B. Reynolds, A. Carlson, M. Bishop, "Modeling network intrusion detection alerts for correlation," ACM Transactions on Information and System Security, Volume 10, Issue 1, 2007.
6. L. Nixon, "The Stakkato Intrusions - What happened and what have we learned?" 2nd Intl. Workshop on Cluster Security, 2006.
7. R. Oppliger, R. Rytz, T. Holderegger, "Internet Banking:Client-Side Attacks and Protection Mechanisms," IEEE Computer Security, 42(6), June 2009. pp 27-33
8. N. Provos, "A Virtual Honeypot Framework," USENIX Security Symposium, USENIX, 2004.
9. P. Querna, "Apache.org downtime - initial report," https://blogs.apache.org/infra/entry/apache-org-downtime-initial-report (03-25-2010).
10. S. E. Schechter, J. Jung, W. Stockwell, C. McLain, "Inoculating SSH against address-harvesting worms," http://nms.csail.mit.edu/projects/ssh/. 2005.
11. B. Schneier, "Two-factor authentication: too little, too late," Communications of the ACM, 48(4), 2005. Page-136
12. A. Sharma, Z. Kalbarczyk, J. Barlow, R. Iyer, "Analysis of Security Incidents in a Large Computing Organization," NCSA-CSL Technical Report-2010-02-15; http://www.ncsa.illinois.edu/~aashish/incidents/Incident- Analysis-Report.pdf
13. D. Song, D. Wagner, X. Tian, "Timing analysis of keystrokes and timing attacks on SSH," in Proc. of the USENIX Security Symposium, 2001. Page 25
14. L. Spitzner, "Honeypots: Tracking Hackers," Addison Wesley Professional, 2002
15. S. E. Schechter, R. Dhamija, A. Ozment, I. Fischer, "The Emperor's New Security Indicators," in Proc. of IEEE Symposium on Security and Privacy, 2007. pp 51-65
16. T. Holz, M. Engelberth, F. Freiling, "Learning More About the Underground Economy: A Case-Study of Keyloggers and Dropzones," Reihe Informatik TR-2008-006, University of Mannheim, Germany.
17. T. Ylonen, C. Lonvick, Ed. "RFC-4252 The Secure Shell (SSH) Authentication Protocol." http://www.ietf.org/rfc/rfc4252.txt, 2006
18. F. Weimer, "New openssl packages fix predictable random number generator,". http://lists.debian.org/debian-securityannounce/2008/msg00152. html (accessed 03-23-2010).
19. T. Ylönen, "SSH - Secure Login Connections over the Internet," Proceedings of the 6th USENIX Security Symposium, 1996.
20. Y. Zhang, V. Paxson, "Detecting stepping stones," Proceedings of the 9th USENIX Security Symposium, 2000.