Design and implementation of a real-time decentralized source identification system for untrusted IP packets

Proceedings - DARPA Information Survivability Conference and Exposition, DISCEX 2000

Volumn 2, Issue , 2000, Pages 100-111

  Chang, H Y ^a   Chen, P ^a   Hayatnagarrear, A ^a   Narayan, R ^a   Sheth, P ^a   Vo, N ^a   Wu, C L ^a   Wu, S F ^a   Zhang, L ^a   Zhang, X ^a   Gong, F ^b   Jou, F ^b   Sargor, C ^b   Wu, X ^b  

^a North Carolina State University   (United States)

^b MCNC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ATTACK PACKETS; DESIGN AND IMPLEMENTATIONS; NETWORK PATHS; NETWORK-BASED; PROTOTYPE IMPLEMENTATIONS; SECURITY ASSOCIATION; SECURITY MANAGEMENT; SOURCE IDENTIFICATION;

EID: 84962278506     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2000.821512     Document Type: Conference Paper

References (13)

1. H. Chang, R. Narayan, B. Vetter, S.F. Wu, M. Brown, J. Yuill, X. Wang, C. Sargor, F. Gong, and F. Jou. DECIDUOUS: Decentralized Source Identification for Network Based Intrusions. In IFIP/IEEE Sixth Integrated Network Management Symposium, Boston, MA, May 1999.
2. F. Gong. Celestial: Security Service Management Architecture. http://www.mcnc.org/HTML/ITD/ANR/Celestial.html, March 1998. MCNC.
3. F. Jou, F. Gong, C. Sargor, S. F. Wu, and R. Cleaveland. Architecture Design of a Scalable Intrusion Detection System for the Emerging Network Infrastructure. Technical Report E296, Adavnced Network Research, MCNC, April 1997.
4. S. Kent and R. Atkinson. IP Authentication Header. Internet Draft, IETF, draft-ietf-ipsec-auth-header-05.txt, March 1998. Network Working Group.
5. S. Kent and R. Atkinson. IP Encapsulating Security Payload. Internet Draft, IETF, draft-ietf-ipsec-esp-v2-04.txt, March 1998. Network Working Group.
6. S. Kent and R. Atkinson. Security Architecture for the Internet Protocol. Internet Draft, IETF, draft-ietf-ipsec-arch-sec-04.txt, March 1998. Network Working Group.
7. D. Maughan, M. Schertler, M. Schneider, and J. Turner. Internet Security Association and Key Management Protocol. Internet Draft, IETF, draft-ietf-ipsec-isakmp-09.txt, March 1998. Network Working Group.
8. D. Piper. The Internet IP Security Domain of Interpretation for ISAKMP. Internet Draft, IETF, draft-ietf-ipsec-doi-08.txt, March 1998. Network Working Group.
9. F.P. Preparata, G. Metze, and R.T. Chein. On connection assignment problem of diagnosable system. IEEE Transactions on Electronic Computers, EC-16:848-854, 1967.
10. D. Schnackenberg. Dynamic Cooperating Boundary Controllers. http://www.darpa.mil/ito/Summaries97/E295-0.html, March 1998. Boeing Defense and Space Group.
11. B. Vetter, F. Wang, and S.F. Wu. An Experimental Study of Insider Attacks for the OSPF Routing Protocol. In IEEE International Conference on Network Protocols (ICNP), pages 293-300, October 1997.
12. Shyhtsun F. Wu. Sleepy Network-Layer Authentication Service for IPSEC. In G. Martella E. Bertino, H. Kurth and E. Montolivo, editors, 4th European Symposium on Research in Computer Security - ESORICS 96, LNCS-1146, pages 146-159, Rome, Italy, September 1996.
13. J. Zao. Policy-Based Dynamic Security Management. http://www.darpa.mil/ito/Summaries97/F318-0.html, March 1998. BBN.