Protocol-independent detection of dictionary attacks

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 8115 LNCS, Issue , 2013, Pages 304-309

  Drašar, Martin ^a  

^a MASARYK UNIVERSITY   (Czech Republic)

Author keywords

anomaly detection; network behavior analysis; traffic classes

Indexed keywords

ADVANCED DETECTIONS; ANOMALY DETECTION; DEEP PACKET INSPECTION; EFFECTIVE SOLUTION; INDUSTRY PRACTICES; NETWORK BEHAVIOR ANALYSIS; PRACTICAL EXPERIENCE; TRAFFIC CLASS;

COMMUNICATION;

COMPUTER CRIME;

EID: 84885796339     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-40552-5_30     Document Type: Conference Paper

References (11)

1. Balland, P.: An Analysis of Network Beaconing Activity for Incident Response (2008), http://www.cert.org/flocon/2008/presentations/balland flocon2008.pdf (retrieved online March 27, 2013)
2. Dasgupta, D., et al.: CIDS: An agent-based intrusion detection system. Computers & Security 24(5), 387-398 (2005)
3. Dragon Research Group: SSH Password Authentication Report (2013), http://www.dragonresearchgroup.org/insight/sshpwauth.txt (retrieved online February 22, 2013)
4. Hellemons, L., Hendriks, L., Hofstede, R., Sperotto, A., Sadre, R., Pras, A.: SSHCure: A Flow-Based SSH Intrusion Detection System. In: Sadre, R., Novotný, J., Č Celeda, P., Waldburger, M., Stiller, B. (eds.) AIMS 2012. LNCS, vol. 7279, pp. 86-97. Springer, Heidelberg (2012)
5. Husák, M., Drašar, M.: Flow-based Monitoring of Honeypots. To Appear in: Proceedings of 7th International Conference on Security and Protection of Information (SPI 2013) (2013)
6. Menezes, A.J., Van Oorschot, P.C., Vanstone, S.A., Rivest, R.L.: Identification and Entity Authentication. In: Handbook of Applied Cryptography. CRC Press, Boca Raton (1997)
7. Seifert, C.: Analyzing Malicious SSH Login Attempts (2006), http://www.securityfocus.com/infocus/1876 (retrieved online March 27, 2013)
8. Sperotto, A., Schaffrath, G., Sadre, R., Morariu, C., Pras, A., Stiller, B.: An Overview of IP Flow-Based Intrusion Detection. Communications Surveys Tutorials 12(3), 343-356 (2010)
9. Thames, J.L., Abler, R., Keeling, D.: A Distributed Active Response Architecture for Preventing SSH Dictionary Attacks. In: IEEE Southeastcon 2008, pp. 84-89 (2008)
10. Vizváry, M., Vykopal, J.: Flow-based Detection of RDP Brute-force Attacks. To Appear in: Proceedings of 7th International Conference on Security and Protection of Information (SPI 2013) (2013)
11. Vykopal, J.: A Flow-Level Taxonomy and Prevalence of Brute Force Attacks. In: Abraham, A., Lloret Mauri, J., Buford, J.F., Suzuki, J., Thampi, S.M. (eds.) ACC 2011, Part II. CCIS, vol. 191, pp. 666-675. Springer, Heidelberg (2011)