Network attack detection at flow level

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6869 LNCS, Issue , 2011, Pages 326-334

  Galtsev, Aleksey A ^a   Sukhov, Andrei M ^a  

^a SAMARA NATIONAL RESEARCH UNIVERSITY   (Russian Federation)

Author keywords

Cisco NetFlow; DDoS Attack; Flow traffic model

Indexed keywords

DDOS ATTACK; FLOW TRAFFICS; INTRUSION DETECTION SYSTEMS; NETFLOWS; NETWORK ATTACK; NETWORK INTRUSIONS; PORT SCANNING; TRAFFIC FLOW MODELING;

ARTIFICIAL INTELLIGENCE; COMPUTER SCIENCE;

COMPUTER CRIME;

EID: 82955180276     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-22875-9_30     Document Type: Conference Paper

References (16)

1. Paulauskas, N., Garsva, E.: Computer System Attack Classification. Electronics and Electrical Engineering 2(66) (2006)
2. Mirkovic, J., Reiher, P.: A taxonomy of DDoS attack and DDoS defense mechanisms. ACM SIGCOMM Comput. Commun. 34(2), 39-53 (2004)
3. Hussain, A., Heidemann, J., Paradopoulos, C.: A Framework for Classifying Denial-of-Service Attacks, Karlsruhe, Germany, pp. 99-110 (2003)
4. Douligeris, C., Mitrokotsa, A.: DDoS Attacks and Defense Mechanisms: Classification and State-of-the-art. Comp. Networks 44, 643-666 (2004)
5. Paxson, V.: An Analysis of Using Reflectors for Distributed Denial-of-Service Attacks. CCR 31(3) (July 2001)
6. Chang, R.K.C.: Defending against Flooding-based Distributed Denial of Service Attacks: A tutorial. IEEE Communications Magazine 40(10), 42-51 (2002)
7. Cisco IOS NetFlow site, Cisco Systems, www.cisco.com/go/netflow
8. Claise, B.: NetFlow Services Export Version 9. RFC 3954 (2004)
9. White Paper: Cisco IOS and NX-OS Software Reference Guide, Cisco Systems, http://www.cisco.com/web/about/security/intelligence/ios-ref.html
10. Afanasiev, F., Petrov, A., Grachev, V., Sukhov, A.: A Flow-based analysis of Internet traffic. Russian Edition of Network Computing 5(98), 92-95 (2003)
11. McGlone, J., Marshall, A., Woods, R.: An Attack-Resilient Sampling Mechanism for Integrated IP Flow Monitors. In: 29th IEEE International Conference on Distributed Computing Systems Workshops (2009) ISBN: 978-0-7695-3660-6
12. Yang, W., Gong, J., Ding, W., Wu, X.: Network Traffic Emulation for IDS Evaluation. In: IFIP International Conference on Network and Parallel Computing, pp. 608-612 (2007) ISBN: 978-0-7695-2943-1
13. Deal, R.A.: Cisco Router Firewall Security: DoS Protection (October 2004), www.informit.com/articles/printerfriendly.aspx?p=345618
14. Fullmer, M., Roming, S.: The OSU Flow-tools Package and Cisco Netflow logs. In: Proceedings of the 2000 USENIX LISA Conference, New Orleans, LA (2000)
15. Haag, P.: Watch your Flows with NfSen and NfDump. In: 50th RIPE Meeting (2005)
16. Marmorstein, R., Kearns, P.: A tool for automated iptables firewall analysis. In: 2005 USENIX Annual Technical Conference, FREENIX Track, pp. 71-82 (April 2005)