A case study in testing a network security algorithm

TRIDENTCOM 2008 - 4th International ICST Conference on Testbeds and Research Infrastructures for the Development of Networks and Communities

Volumn , Issue , 2008, Pages

  Gates, Carrie E ^a  

^a Sterling Software   (United States)

Author keywords

Network security; Testing

Indexed keywords

ALGORITHMS; RESEARCH; TESTBEDS; TESTING;

COMPLETE PROBLEMS; FALSE POSITIVE RATES; NETWORK DATA; PROBLEM DOMAIN; REALISTIC TRAFFICS; REGRESSION EQUATION; SECURITY ALGORITHM; SECURITY EVENTS;

NETWORK SECURITY;

EID: 84898609097     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.4108/tridentcom.2008.3220     Document Type: Conference Paper

References (16)

1. H. Akaike. Information theory as an extension of the maximum likelihood principle. In B. N. Petrov and F. Csaksi, editors, Proceedings of the 2nd International Symposium on Information Theory, pages 267-281, Budapest, Hungary, 1973.
2. N. Athanasiades, R. Abler, J. Levine, H. Own, and G. Riley. Intrusion detection testing and benchmarking methodologies. In Proceedings of First IEEE International Workshop on Information Assurance, pages 63-72, Darmstadt, Germany, March 2003.
3. S. Axelsson. The base-rate fallacy and the difficulty of intrusion detection. ACM Transactions on Information and System Security, 3(3): 186-205, 2000.
4. C. Gates. Co-ordinated Port Scans: A Model, A Detector and an Evaluation Methodology. PhD thesis, Dalhousie University, Feb 2006.
5. C. Gates, M. Collins, M. Duggan, A. Kompanek, and M. Thomas. More NetFlow tools: For performance and security. In Proceedings of the 18th Large Installation Systems Administration Conference (LISA 2004), pages 121-132, Atlanta, Georgia, USA, November 2004.
6. C. Gates, J. J. McNutt, J. B. Kadane, and M. Kellner. Scan detection on very large networks using logistic regression modeling. In Proceedings of the IEEE Symposium on Computers and Communications, pages 402-407, Pula-Cagliari, Sardinia, Italy, June 2006.
7. Intrusec. Intrusec alert: 55808 trojan analysis. http://www.intrusec.com/ 55808.html, 2003. Last visited: 1 July 2003.
8. R. P. Lippmann et al. Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion detection evaluation. In DARPA Information Survivability Conference and Exposition, Volume 2, pages 12-26, 2000.
9. M. V. Mahoney and P. K. Chan. An analysis of the 1999 DARPA/Lincoln Laboratory evaluation data for network anomaly detection. In Proceedings of the Sixth International Symposium on Recent Advances in Intrusion Detection, pages 220-237, Pittsburgh, PA, USA, September 2003.
10. R. A. Maxion and K. M. Tan. Benchmarking anomaly-based detection systems. In Proceedings of 2000 International Conference on Dependable Systems and Networks, pages 623-630, June 2000.
11. J. McHugh. Testing intrusion detection systems: a critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by Lincoln Laboratory. ACM Transactions on Information and System Security, 3(4): 262-294, 2000.
12. R. Pang, V. Yegneswaran, P. Barford, V. Paxson, and L. Peterson. Characteristics of internet background radiation. In Proceedings of the 4th ACM SIGCOMM Conference on Internet Measurement, pages 27-40, Taormina, Sicily, Italy, October 2004.
13. V. Paxson and S. Floyd. Why we don't know how to simulate the internet. In Proceedings of the 29th conference on Winter simulation, pages 1037-1044, Wisconsin, 1997. ACM Press.
14. S. Staniford, J. Hoagland, and J. McAlerney. Practical automated detection of stealthy portscans. Journal of Computer Security, 10(1): 105-136, 2002.
15. S. Staniford, J. A. Hoagland, and J. M. McAlerney. Practical automated detection of stealthy portscans. In Proceedings of the 7th ACM Conference on Computer and Communications Security, Athens, Greece, November 2000.
16. B. White, J. Lepreau, L. Stoller, R. Ricci, S. Guruprasad, M. Newbold, M. Hibler, C. Barb, and A. Joglekar. An integrated experimental environment for distributed systems and networks. In Proceedings of the Fifth Symposium on Operating Systems Design and Implementation, pages 255-270, Boston, MA, USA, December 2002. USENIX Association.