Surveillance detection in high bandwidth environments

Proceedings - DARPA Information Survivability Conference and Exposition, DISCEX 2003

Volumn 1, Issue , 2003, Pages 130-138

  Robertson, S ^a   Siegel, E V ^a   Miller, M ^a   Stolfo, S J ^b  

^a System Detection Inc   (United States)

^b Och Spine at New York Presbyterian Hospitals   (United States)

Author keywords

Bandwidth; Data security; Electrostatic discharge; Filters; Information analysis; Information security; Intrusion detection; Probes; Real time systems; Surveillance

Indexed keywords

BANDWIDTH; ELECTROSTATIC DEVICES; ELECTROSTATIC DISCHARGE; FILTERS (FOR FLUIDS); INFORMATION ANALYSIS; INTERACTIVE COMPUTER SYSTEMS; INTRUSION DETECTION; MONITORING; PROBES; SECURITY OF DATA; SPACE SURVEILLANCE;

AUDIT DATA; DETECTION MODULES; HIGH BANDWIDTH; NETWORK ENVIRONMENTS; OFFLINE; PACKET TRACES; REAL TIME; TCPDUMP;

REAL TIME SYSTEMS;

EID: 84942250809     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2003.1194879     Document Type: Conference Paper

References (9)

1. P.K. Chan and M.V. Mahoney, "Detecting Novel Attacks by Identifying Anomalous Network Packet Headers". Florida Tech. technical report CS-2001-2, 2001.
2. CERT, "CERT® Advisory CA-2001-23 Continued Threat of the 'Code Red' Worm". http://www.cert.org/advisories/CA-2001-23.html
3. CERT, "CERT® Advisory CA-2001-26 Nimda Worm". http://www.cert.org/advisories/CA-2001-26.html
4. Fyodor. "The Art of Port Scanning." Phrack 51, volume 7. September 1, 1997. http://www.phrack.com/phrack/51/P51-11
5. W. Lee and S. Stolfo. "Data Mining Approaches for Intrusion Detection". In Proceedings of the Seventh USENIX Security Symposium (SECURITY '98), San Antonio, TX, January 1998.
6. S. Northcutt. "Network Intrusion Detection: An Analyst's Handbook". New Riders, Indianapolis, 1999. pp.122-139.
7. Openwall Project, "scanlogd: a port scan detection tool". http://www.openwall.com/scanlogd/
8. M. Roesch. http://www.snort.org/
9. S. Staniford, J. A. Hoagland, J. M. McAlerney, "Practical Automated Detection of Stealthy Portscans", Seventh ACM Conference on Computer and Communications Security, Athens, Greece, 2000.