Protocol scrubbing: Network security through transparent flow modification

Proceedings - DARPA Information Survivability Conference and Exposition II, DISCEX 2001

Volumn 2, Issue , 2001, Pages 108-118

  Watson, D ^a   Smart, M ^a   Malan, G R ^a   Jahanian, F ^a  

^a UNIVERSITY OF MICHIGAN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; INTRUSION DETECTION; MERCURY (METAL); NETWORK PROTOCOLS; PASSIVE NETWORKS; SCRUBBERS; TRANSMISSION CONTROL PROTOCOL;

DESIGN AND IMPLEMENTATIONS; END POINTS; NETWORK BASED INTRUSION DETECTION SYSTEMS; NETWORK FLOWS; PROTOCOL LAYERS; STATE MACHINE;

NETWORK SECURITY;

EID: 84964467096     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2001.932163     Document Type: Conference Paper

References (25)

1. D. B. Chapman and E. D. Zwicky. Building Internet Firewalls. O'Reily and Associates, Inc., 1995.
2. FreeBSD Homepage. http://freebsd.org.
3. Fyodor. Remote OS detection via TCP/IP stack fingerprinting. http://www.insecure.org/nmap/nmap-fingerprinting-article.html, October 1998.
4. Intel Internet Exchange Architecture. http://developer.intel.com/design/IXA/.
5. G. R. Malan, D. Watson, F. Jahanian, and P. Howell. Transport and Application Protocol Scrubbing. In Proceedings of the IEEE INFOCOMM 2000 Conference, Tel Aviv, Israel, March 2000.
6. D. Maltz and P. Bhagwat. TCP Splicing for Application Layer Proxy Performance. Technical Report RC 21139, IBM Research Division, March 1998.
7. R. McCabe. Iplog. http://ojnk.sourceforge.net/.
8. B. Mukherjee, L. T. Heberlein, and K. N. Levitt. Network Intrusion Detection. IEEE Network, 8(3):26-41, May and June 1994.
9. Netperf: A Network Performance Benchmark, http://www.netperf.org/.
10. V. Paxson. Automated Packet Trace Analysis of TCP Implementations. In Proceedings of ACM SIGCOMM '97, Cannes, France, September 1997.
11. V. Paxson. Bro: A System for Detecting Network Intruders in Real-Time. In Proceedings of the 7th USENIX Security Symposium, San Antonio, Texas, January 1998.
12. T. H. Ptacek and T. N. Newsham. Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection. Originally Secure Networks, Inc., now available as a white paper at the Network Associates Inc., http://www.nai.com/, January 1998.
13. D. Putzolu, S. Bakshi, S. Yadav, and R. Yavatkar. The Phoenix Framework: A Practical Architecture for Programmable Networks. IEEE Communications, 38(3):160-165, March 2000.
14. Queso Homepage, http://www.apostols.org/projectz/queso/.
15. M. J. Ranum. Intrusion Detection: Challenges and Myths. Network Flight Recorder, Inc. whitepaper at http://www.nfr.com/, 1998.
16. M. J. Ranum, K. Landfield, M. Stolarchuk, M. Sienkiewicz, A. Lambeth, and E. Wall. Implementing a Generalized Tool for Network Monitoring. In Proceedings of the Eleventh Systems Administration Conference (LISA '97), San Diego, CA, October 1997.
17. L. Rizzo. Dummynet: a simple approach to the evaluation of network protocols. ACM Computer Communication Review, January 1997.
18. I. S. Services. RealSecure™. http://www.iss.net/prod/rs.html.
19. M. Smart, G. R. Malan, and F. Jahanian. Defeating TCP/IP Stack Fingerprinting. In Proceedings of 9th USENIX Security Symposium, Denver, Colorado, August 2000.
20. O. Spatscheck, J. S. Hansen, J. H. Hartman, and L. L. Peterson. Optimizing TCP Forwarder Performance. Technical Report TR98-01, Dept. of Computer Science, University of Arizona, February 1998.
21. W. R. Stevens. TCP/IP Illustrated, Volume 1: The Protocols. Addison-Wesley, 1994.
22. T. I. Systems. TIS Firewall Toolkit, ftp://ftp.tis.com/pub/firewalls/toolkit.
23. C. P. S. Technologies. FireWall-1. http://www.checkpoint.com.
24. G. B. White, E. A. Fisch, and U. W. Pooch. Cooperating Security Managers: A Peer-Based Intrusion Detection System. IEEE Network, 10(1):20-23, January and February 1996.
25. G. R. Wright and W. R. Stevens. TCP/IP Illustrated, Volume 2: The Implementation. Addison-Wesley, 1995.