Statistical model applied to NetFlow for network intrusion detection

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6480, Issue PART 2, 2010, Pages 179-191

  Proto, André ^a   Alexandre, Leandro A ^a   Batista, Maira L ^a   Oliveira, Isabela L ^a   Cansian, Adriano M ^a  

^a SÃO PAULO STATE UNIVERSITY UNESP   (Brazil)

Author keywords

anomaly; intrusion detection; NetFlow; network; Security; statistical

Indexed keywords

ANOMALY; NETFLOWS; NETWORK; SECURITY; STATISTICAL;

INTERNET PROTOCOLS; NETWORK SECURITY;

INTRUSION DETECTION;

EID: 78650597637     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-17697-5_9     Document Type: Article

References (13)

1. Cole, E., Krutz, R., Conley, J.R.: Network Security Bible, 2nd edn. Wiley Publishing Inc., Indianapolis (2009)
2. Quittek, J., Zseby, T., Claise, B., Zender, S.: RFC 3917: Requirements for IP Flow Information Export: IPFIX, Hawthorn Victoria (2004), http://www.ietf.org/rfc/rfc3917.txt
3. Claise, B.: RFC 3954: Cisco Systems NetFlow Services Export Version 9 (2004), http://www.ietf.org/rfc/rfc3954.txt
4. Sourcefire, Snort.org, http://www.snort.org
5. Corrêa, J. L., Proto, A., Cansian, A. M.: Modelo de armazenamento de fluxos de rede para análises de tráfego e de segurança. In: VIII Simpósio Brasileiro em Segurança da Informaç ão e de Sistemas Computacionais (SBSeg), Gramado (2008)
6. Zhenqi, W., Xinyu, W.: NetFlow Based Intrusion Detection System. In: International Conference on Multimedia and Information Technology, Phuket (2008)
7. Roche, V.P., Arronategui, U.: Behavioural Characterization for Network Anomaly Detection. In: Gavrilova, M.L., Tan, C.J.K., Moreno, E.D. (eds.) Transactions on Computational Science IV. LNCS, vol. 5430, pp. 23-40. Springer, Heidelberg (2009)
8. Bin, L., Chuang, L., Jian, Q., Jianping, H., Ungsunan, P.: A NetFlow based flow analysis and monitoring system in enterprise networks. Computer Networks 5, 1074-1092 (2008)
9. Gollmann, D.: Computer Security, 1st edn. John Wiley & Sons, New York (1999)
10. Dekking, F.M., Kraaikamp, C., Lopuhaä, H.P., Meester, L.E.: A modern introduction to probability and statistics, 1st edn., pp. 234-244. Springer, Heidelberg (2005)
11. Elmasri, R.E., Navathe, S.: Fundamentals of Database Systems, 4th edn. Addison-Wesley, Reading (2005)
12. Mockapetris, P.: RFC 1034: Domain Names - Concepts and Facilities (1987), http://www.ietf.org/rfc/rfc1034.txt
13. Kurose, J.F., Ross, K.W.: Computer Networking: A Top-Down Approach, 5th edn., pp. 65-80. Addison-Wesley, Reading (2003)