Real-time and resilient intrusion detection: A flow-based approach

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 7279 LNCS, Issue , 2012, Pages 109-112

  Hofstede, Rick ^a   Pras, Aiko ^a  

^a UNIVERSITY OF TWENTE   (Netherlands)

Author keywords

[No Author keywords available]

Indexed keywords

CURRENT FLOWS; FLOW MONITORING; HIGH-SPEED; INTRUSION DETECTION ALGORITHMS; MONITORING SYSTEM; NETFLOWS; PACKET-BASED; PERFORMANCE REQUIREMENTS;

AGGREGATES;

INTRUSION DETECTION;

EID: 84861978550     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-30633-4_13     Document Type: Conference Paper

References (11)

1. Claise, B.: Cisco Systems NetFlow Services Export Version 9. RFC 3954 (Informational) (October 2004)
2. Sadasivan, G., Brownlee, N., Claise, B., Quittek, J.: Architecture for IP Flow Information Export. RFC 5470 (Informational) (March 2009)
3. Zseby, T., Boschi, E., Brownlee, N., Claise, B.: IP Flow Information Export (IPFIX) Applicability. RFC 5472 (Informational) (March 2009)
4. Sperotto, A., Schaffrath, G., Sadre, R., Morariu, C., Pras, A., Stiller, B.: An Overview of IP Flow-Based Intrusion Detection. IEEE Communications Surveys Tutorials 12(3), 343-356 (2010)
5. Sperotto, A.: Flow-Based Intrusion Detection. PhD thesis, University of Twente (October 2010)
6. Münz, G., Carle, G.: Real-time Analysis of Flow Data for Network Attack Detection. In: Proceedings of the 10th IFIP/IEEE International Symposium on Integrated Network Management (IM 2007), pp. 100-108 (2007)
7. Sadre, R., Sperotto, A., Pras, A.: The Effects of DDoS Attacks on Flow Monitoring Applications. In: Proceedings of the IEEE/IFIP Network Operations and Management Symposium (NOMS 2012) (to appear, 2012)
8. Quittek, J., Bryant, S., Claise, B., Aitken, P., Meyer, J.: Information Model for IP Flow Information Export. RFC 5102 (Standards track) (January 2008)
9. Bartos, K., Rehak, M., Krmicek, V.: Optimizing Flow Sampling for Network Anomaly Detection. In: 7th International Wireless Communications and Mobile Computing Conference (IWCMC 2011), pp. 1304-1309 (2011)
10. Duffield, N., Lund, C., Thorup, M.: Properties and Prediction of Flow Statistics from Sampled Packet Streams. In: Proceedings of the ACM SIGCOMM Internet Measurement Workshop, pp. 159-171 (2002)
11. SURFnet (2012), http://www.surfnet.nl/en (accessed on March 29, 2012)