Intrusion analysis with deep packet inspection: Increasing efficiency of packet based investigations

Proceedings - 2011 International Conference on Cloud and Service Computing, CSC 2011

Volumn , Issue , 2011, Pages 342-347

  Smallwood, Daniel ^a   Vance, Andrew ^b  

^a Computer Sciences Corporation ^*  (United States)

^b STRATIS ^*  (United States)

Author keywords

Cloud Computing; Deep Packet Inspection; Intrusion Detection; Packet Capture; Security; TCPDUMP

Indexed keywords

BOTNETS; CLOUD SERVICES; DATA CENTERS; DATA EXFILTRATION; DATA VOLUME; DEEP PACKET INSPECTION; DISTRIBUTED ARCHITECTURE; DYNAMIC DATA; INDUSTRY PRACTICES; INTERNET ACCESS PROVIDERS; INTRUSION ANALYSIS; MALWARES; NETWORK DATA; NETWORK INTRUSION DETECTION; PACKET ANALYSIS; PACKET CAPTURE; PACKET-BASED; QUERY RESPONSE; SECURITY; SECURITY PRACTITIONERS; SECURITY RISKS; TCPDUMP; TECHNICAL PERFORMANCE; ZERO DAY ATTACK;

CLOUD COMPUTING; EFFICIENCY; INTRUSION DETECTION; NETWORK SECURITY;

PACKET NETWORKS;

EID: 84857299149     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSC.2011.6138545     Document Type: Conference Paper

References (20)

1. K. Vieira, A. Schulter, C. Westphall, C. Westphall, "Intrusion detection for grid and cloud computing," IT Professional, vol. 12, no. 4, pp. 38-43, July/August 2010.
2. T. Jaeger, J. Schiffman, "Outlook: Cloudy with a chance of security challenges and improvements," IEEE Security &Privacy, January/February 2010.
3. S. Gadia, "Cloud computing risk assessment," ISACA Journal, vol. 4, 2011.
4. T. Singleton, "IT Risks - Present and future," ISACA Journal, vol. 4, 2011.
5. E. Mills, "Cloud computing security forecast: Clear skies,"CNET, January 2009. http://news.cnet.com/8301-1009-3-10150569-83. html
6. S. Chasin, "The cloud is changing everything: It's not just for scaling your business, but protecting it too," McAfee Editorial Brief, August 2011.
7. R. Yasin "10 technologies to watch in 2010: Deep packet inspection adds a layer of defense," Government Computer News, January 2010.
8. S. Yoon, B. Kim, J. Oh, "High-Performance stateful intrusion detection system "International Conference on Computational Intelligence and Security (ICCIAS), 2007.
9. T. AbuHmed, A. Mohaisen, D. Nyang, "Deep packet inspection for intrusion detection systems: A survey," Magazine of Korea Telecommunication Society, vol. 24, No. 11, pages 25-36, November 2007.
10. A. Li, L. Gu, K. Xu, "Fast anomoly detection in large data centers," In Proc. of the 2010 IEEE Global Commuincations Conference (GLOBECOM' 10), 2010.
11. C. Kruegel, F.Valeur, G. Vigna, R. Kemmerer, "Stateful Intrusion Detection for High-Speed Networks," IEEE Symposium on Security and Privacy - S&P, 2005.
12. H. Tipton, M. Krause, "Deep Packet Inspection Technologies, "Information Systems Security, Auerbach Publications, 2009.
13. M. Rash, A. D. Orebaugh, G. Clark, B. Pinkard, and J. Babbin. "Intrusion Prevention and Active Response: Deploying Network and Host IPS," Syngress, 2005.
14. S. McCanne, V. Jacobson, "The BSD Packet Filter: A New Architecture for User-level Packet Capture." Winter USENIX, January, 1993.
15. TCPDUMP. Network packet analyzer. http://www.tcpdump.org/.
16. ArcSight. Security Information Manager. http://www.arcsight.com/.
17. Wireshark. Network packet analyzer. http://www.wireshark.org/.
18. TShark. Network Protocol Analyzer. http://www.wireshark.org/docs/man- pages/tshark.html/.
19. L. Vaquero, L. Rodero-Merino, J. Caceres, M. Lindner, "A Break in the Clouds: Towards a Cloud Definition," ACM SIGCOMM Computer Communication Review, Volume 39, Number 1, pages 50-55, January 2009.
20. C. Gerber, "Deep Security: DISA beefs up network security with deep packet inspection of IP transmissions," Military Information Technology, Issue 8, Volume 12 September 2008.