Multiscale stepping-stone detection: Detecting pairs of jittered interactive streams by exploiting maximum tolerable delay

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2516, Issue , 2002, Pages 17-35

  Donoho, David L ^a   Flesia, Ana Georgina ^a   Shankar, Umesh ^b   Paxson, Vern ^c   Coit, Jason ^d   Staniford, Stuart ^d  

^a STANFORD UNIVERSITY   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

^c INTERNATIONAL COMPUTER SCIENCE INSTITUTE   (United States)

^d Silicon Defense   (United States)

Author keywords

Evasion; Interactive session; Multiscale methods; Network intrusion detection; Stepping stone; Universal keystroke interarrival distribution; Wavelets

Indexed keywords

MERCURY (METAL);

EVASION; INTERACTIVE SESSION; INTERARRIVAL DISTRIBUTIONS; MULTISCALE METHOD; NETWORK INTRUSION DETECTION; STEPPING STONE; WAVELETS;

INTRUSION DETECTION;

EID: 84958977733     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-36084-0_2     Document Type: Conference Paper

References (11)

1. Aldous, D.L.: Probability Approximations Via the Poisson Clumping Heuristic. Springer-Verlag, New York. January 1989
2. Lindgren, G., Leadbetter, M.R., and Rootzen, H.: Extremes and related properties of stationary sequences and processes. Springer, New York (1983). Russian translation; Nauka: Moscow (1988).
3. Shimomura, T. and Markoff, J.: Takedown. The pursuit and capture of Kevin Mitnick, America’s most wanted computer outlaw–by the man who did it. Hyperion. December 1995.
4. Mallat, S.: A Wavelet Tour of Signal Processing. Academic Press. Second Edition, 2000.
5. Meyer, Y.:Wavelets: Algorithms and Applications. SIAM.May 1993
6. Stoll, C.: The Cuckoo’s Egg: Tracking a Spy through the Maze of Computer Espionage. Pocket Books. October 2000
7. Staniford-Chen, S. and Heberlein, L.: Holding Intruders Accountable on the Internet. Proceedings of the 1995 IEEE Symposium on Security and Privacy, Oakland, CA (1995)
8. Zhang, Y. and Paxson, V.: Detecting stepping stones. Proceedings of the 9th USENIX Security Symposium, Denver, Colorado, August 2000. http://www.aciri.org/vern/papers/stepping-sec00.ps.gz
9. Paxson, V. and Floyd, S.: Wide-Area Traffic: The Failure of Poisson Modeling. IEEE/ACM Transactions on Networking, Vol. 3(3),June 1995, 226–244
10. Wavelab Toolbox for Wavelet Analysis. Requires Matlab. http://www-stat.stanford.edu/wavelab
11. Yoda, K. and Etoh, H.: Finding a Connection Chain for Tracing Intruders, In: Guppens, F.,Deswarte, Y., Gollamann, D. and Waidner, M. (eds): 6th European Symposium on Research in Computer Security - ESORICS 2000 LNCS -1985, Toulouse, France, Oct 2000