Flow-based worm detection using correlated honeypot logs

15th ITG/GI Symposium on Communication in Distributed Systems, KiVS 2007

Volumn 2007-January, Issue , 2007, Pages 1-6

  Dressler, Falko ^a   Jaegers, Wolfgang ^a   German, Reinhard ^a  

^a UNIVERSITY OF ERLANGEN NUREMBERG   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

HIGH SPEED NETWORKS;

ANOMALY DETECTION; ATTACK DETECTION; ATTACK PATTERNS; FALSE POSITIVE RATES; FLOW SIGNATURE; HOT RESEARCH TOPICS; SIGNATURE-BASED APPROACH; WORM DETECTION;

NETWORK SECURITY;

EID: 84991972328     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (11)

1. Bace, R., Mell, P.: Intrusion Detection Systems. Nist computer security special publication sp SOO-31, National Institute of Standards and Technology (2001)
2. Mirkovic, J., Reiher, P.: A Taxonomy of DDoS Attack and DDoS Defense Mechanisms. ACM SIGCOMM Computer Communication Review 34 (2004) 3953
3. Dressler, F., Miinz, G., Carle, G.: CATS - Cooperating Autonomous Detection Systems. In: 1st IFIP International Workshop on Autonomic Communication (WAC 2004), Poster Session, Berlin, Germany (2004)
4. Conti, G., Abdullah, K.: Passive visual fingerprinting of network attack tools. In: ACM workshop on Visualization and data mining for computer security, Washington, DC, USA (2004) 4554
5. Kreibich, C., Crowcroft, J.: Honeycomb: Creating Intrusion Detection Signatures Using Honeypots. ACM SIGCOMM Computer Communication Review 34 (2004) 5156
6. Beale, J., Caswell, B.: Snort 2.1 Intrusion Detection. 2nd edn. Syngress (2004)
7. Paxson, V.: Bro: A System for Detecting Network Intruders in Real-Time. Computer Networks 31 (1999) 24352463
8. S. Mirkovic, J., Prier, G., Reiher, P.: Attacking DDoS at the Source. In: 10th IEEE International Conference on Network Protocols (ICNP 2002), Paris, France (2002) 312321
9. Molina, M.: A scalable and efficient methodology for flow monitoring in the Internet. In Charzinski, J., Lehnert, R., Tran-Gia, P., eds.: lSth International Teletraffic Congress (ITC1S). Volume 5a of Providing Quality of Service in Heterogeneous Environments., Berlin, Germany, Elsevier (2003) 2712S0
10. Dressler, F., Miinz, G.: Flexible Flow Aggregation for Adaptive Network Monitoring. In: 31st IEEE Conference on Local Computer Networks (LCN): 1st IEEE LCN Workshop on Network Measurements (WNM 2006), Tampa, Florida (2006)
11. Mahoney, M.V., Chan, P.K.: Learning Nonstationary Models of Normal Network Traffic for Detecting Novel Attacks. In: Sth ACM International Conference on Knowledge Discovery and Data Mining. (2002) 3763S5