Collaborative anomaly-based detection of large-scale internet attacks

Computer Networks

Volumn 56, Issue 1, 2012, Pages 169-185

  Gamer, Thomas ^a  

^a KARLSRUHE INSTITUTE OF TECHNOLOGY   (Germany)

Author keywords

Attack detection; Collaboration; Large scale attacks

Indexed keywords

ATTACK DETECTION; COLLABORATION; COLLABORATIVE DETECTION; DETECTION SYSTEM; DISTRIBUTED DENIAL OF SERVICE ATTACK; DOMAIN BOUNDARY; INTERNET ATTACKS; INTERNET BASED; INTERNET INFRASTRUCTURE; LARGE-SCALE ATTACKS; TRUST RELATIONSHIP; VARIOUS ATTACKS; WORM PROPAGATION;

DISTRIBUTED COMPUTER SYSTEMS; INTERNET;

COMPUTER CRIME;

EID: 84655161362     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2011.08.015     Document Type: Article

References (31)

1. Arbor Networks, Worldwide Infrastructure Security Report 2009. (January 2010).
2. Y. Namestnikov, The economics of botnets, Analysis on viruslist.com, Kapersky Lab (July 2009).
3. B. Johnson, Million dollar student faces web blackmail, The Guardian News and Media Limited (January 2006).
4. M. Roesch, Snort. (April 2009).
5. K. Zaraska, PreludeIDS: current state and development perspectives. (September 2008).
6. A. Lakhina, M. Crovella, and C. Diot Mining anomalies using traffic feature distributions SIGCOMM Computer Communication Review 35 4 2005 217 228 (Pubitemid 46323506)
7. C. Manikopoulos, and S. Papavassiliou Network intrusion and fault detection: a statistical anomaly approach IEEE Communications Magazine 40 10 2002 76 82 (Pubitemid 35311949)
8. Y. Chen, K. Hwang, and W.-S. Ku Collaborative detection of DDoS attacks over multiple network domains IEEE Transactions on Parallel and Distributed Systems 18 12 2007 1649 1662 (Pubitemid 350142414)
9. G. Carl, G. Kesidis, R. Brooks, and S. Rai Denial-of-service attack-detection techniques IEEE Internet Computing 10 1 2006 82 89 (Pubitemid 43159617)
10. W. Zhang, S. Teng, X. Fu, Scan attack detection based on distributed cooperative model, in: Proceedings of 12th International Conference on Computer Supported Cooperative Work in Design (CSCW), Xian, China, 2008, pp. 743-748.
11. A. Nucci, and S. Bannerman Controlled chaos IEEE Spectrum 44 12 2007 42 48
12. D. Frincke, E. Wilhite, Distributed network defense, in: Proceedings of the 2001 IEEE Workshop on Information Assurance and Security, West Point, NY, 2001, pp. 236-238.
13. C. Papadopoulos, R. Lindell, J. Mehringer, A. Hussain, R. Govindan, COSSACK: coordinated suppression of simultaneous attacks, in: Proceedings of DARPA Information Survivability Conference and Exposition (DISCEX), Washington, DC, USA, 2003, pp. 2-13.
14. T. Gamer, M. Scharf, M. Schöller, Collaborative anomaly-based attack detection, in: Proceedings of 2nd International Workshop on Self-Organizing Systems (IWSOS 2007), Lecture Notes in Computer Science, Springer, English Lake District, UK, 2007, pp. 280-287.
15. V. Sekar, N. Duffield, O. Spatscheck, J. van der Merwe, H. Zhang, LADS: large-scale automated DDoS detection system, in: Proceedings of USENIX Technical Conference, Boston, MA, USA, 2006, pp. 171-184.
16. G. Mnnz, A. Fessi, G. Carle, O. Paul, D. Gabrijelcic, Y. Carlinet, S. Yusuf, M. Sloman, P. Sagmeister, G. Dittmann, J. van Lunteren, Diadem firewall: Web server overload attack detection and response, in: Proceedings of Broadband Europe (BBEurope), Bordeaux, France, 2005.
17. S. Katti, B. Krishnamurthy, D. Katabi, Collaborating against common enemies, in: Proceedings of the 5th ACM SIGCOMM Conference on Internet Measurement (IMC), USENIX Association, Berkeley, CA, USA, 2005, pp. 365-378.
18. W.L. Cholter, P. Narasimhan, D. Sterne, R. Balupari, K. Djahandari, A. Mani, and S. Murphy Iban: Intrusion blocker based on active networks Proceedings of the DARPA Active Networks Conference and Exposition (DANCE) 2002 IEEE Computer Society San Francisco, CA, USA 182 192
19. E.H. Spafford, and D. Zamboni Intrusion detection using autonomous agents Computer Networks 34 4 2000 547 570
20. C.V. Zhou, S. Karunasekera, C. Leckie, Evaluation of a decentralized architecture for large scale collaborative intrusion detection, in: Proceedings of 10th IFIP/IEEE International Symposium on Integrated Network Management (IM), 2007, pp. 80-89. (Pubitemid 47485161)
21. T. Gamer, M. Schöller, and R. Bless An extensible and flexible system for network anomaly detection Proceedings of 1st International IFIP TC6 Conference on Autonomic Networking (AN) Lecture Notes in Computer Science 2006 Springer Paris, France 97 108 (Pubitemid 44609492)
22. T. Gamer, Anomaly-based identification of large-scale attacks, in: Proceedings of IEEE Global Telecommunications Conference (GlobeCom), IEEE, Honolulu, HI, USA, 2009.
23. H. Schulzrinne, R. Hancock, GIST: General Internet Signalling Transport, Experimental rfc, Internet Engineering Task Force (IETF) (July 2009).
24. N.B. Chang, and M. Liu Controlled flooding search in a large network IEEE/ACM Transactions on Networking 15 2 2007 436 449 (Pubitemid 46621621)
25. M.F. Kaashoek, D.R. Karger, Koorde: a simple degree-optimal distributed hash table, in: Proceedings of 2nd International Workshop on Peer-to-Peer Systems (IPTPS), Berkeley, CA, USA, 2003, pp. 98-107.
26. B. Fenner, M. Handley, H. Holbrook, I. Kouvelas, Protocol Independent Multicast - Sparse Mode (PIM-SM): Protocol Specification (Revised), RFC 4601, Internet Engineering Task Force (IETF) (August 2006).
27. A. Varga, The OMNeT++ discrete event simulation system, in: Proceedings of the 15th European Simulation Multiconference (ESM), Prague, Czech Republic, 2001, pp. 319-324.
28. A. Varga, INET Framework, 2009. .
29. H. Ringberg, M. Roughan, and J. Rexford The need for simulation in evaluating anomaly detectors SIGCOMM Computer Communication Review 38 1 2008 55 59
30. T. Gamer, C.P. Mayer, Simulative evaluation of distributed attack detection in large-scale realistic environments, SIMULATION: Transactions of the Society for Modeling and Simulation International, published online before print, 2010.
31. V. Paxson, S. Floyd, Why we don't know how to simulate the Internet? in: Proceedings of the 29th Conference on Winter Simulation (WSC), Atlanta, Georgia, United States, 1997, pp. 1037-1044.