Towards network awareness

LISA 2005 - 19th Large Installation System Administration Conference

Volumn , Issue , 2005, Pages 113-124

  Hughes, Evan ^a   Somayaji, Anil ^a  

^a CARLETON UNIVERSITY   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

COMMODITY HARDWARE; NETWORK AWARENESS; NETWORK TRAFFIC; OPEN SOURCE TOOLS; PACKET AGGREGATION; PROCESS NETWORKS; STREAM RECONSTRUCTION; SYSTEM ADMINISTRATORS;

NETWORK LAYERS;

EID: 85018426414     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (32)

1. tcptrace homepage, http://www.tcptrace.org , Accessed May 3, 2005
2. Ethereal homepage, http://www.ethereal.com , Accessed May 3, 2005
3. Netwitness homepage, http://www.netwitness.com , Accessed May 3, 2005
4. snort homepage, http://www.snort.org/ , Accessed: May 3, 2005
5. Matrawy, Ashraf, Paul C. van Oorschot, Anil Somayaji, "Mitigating network denial-of-service through diversity-based traffic management," Applied Cryptography and Network Security (ACNS) 2005, pp. 104-121, 2005
6. Ball, Robert, Glenn A. Fink, and Chris North, "Home-centric visualization of network traffic for security administration," VizSEC/DMSEC ?04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pp. 55-64, ACM Press, New York, NY, 2004
7. Becker, Richard A., Stephen G. Eick, and Allan R. Wilks, "Visualizing network data," IEEE Transactions on Visualization and Computer Graphics, Vol. 1, Num. 1, pp. 16-28, 1995
8. Bellovin, Steven M., "Packets found on an internet," SIGCOMM Comput. Commun. Rev., Vol. 23, Num. 3, pp. 26-31, 1993
9. Wilmer Caripe, et al., "Network awareness and mobile agent systems," IEEE Communications Magazine, July, 1998
10. Clearsight, Clearsight analyzer homepage, http://www.clearsightnet.com/products-Analyzer. jsp , Accessed May 4, 2005
11. Colasoft, Colasoft capsa, http://www.colasoft.com/ products/capsa.php , Accessed May 3, 2005
12. Crocker, D. and P. Overell, "Augmented BNF for Syntax Specifications: ABNF," RFC 2234, November, 1997
13. Endsley, Mica R. and Daniel J. Garland, editors, Situation Awareness Analysis and Measurement, Lawrence Erlbaum Associates, 2000
14. Franks, J., P. Hallam-Baker, J. Hostetler, S. Lawrence, P. Leach, A. Luotonen, and L. Stewart, " H T T P Authentication: Basic and Digest Access Authentication," RFC 2617, November, 1997
15. Gates, Carrie, Michael Collins, Michael Duggan, Andrew Kompanek, and Mark Thomas, "More netflow tools: For performance and security," 18th Large Installation System Administration Conference (LISA ?04), pp. 121-132, Atlanta, Georgia, November, 2004
16. Goldring, Tom, "Scatter (and other) plots for visualizing user profiling data and network traffic," VizSEC/DMSEC ?04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pp. 119-123, ACM Press, New York, NY, 2004
17. Gregg, Brendan, Chaosreader homepage, http:// users.tpg.com.au/bdgcvb/chaosreader.html , Accessed May 3, 2005
18. U. S. Coast Guard, Te a m coordination training student guide, http://www.cgaux.info/g-ocx/training/ tct , Accessed May 4, 2004
19. Herman, Paul, tcpstat homepage, http://www. frenchfries.net/paul/tcpstat/ , Accessed May 1, 2005
20. Network Instruments, Observer homepage, http:// www.networkinstruments.com/products/observer. html , Accessed May 4, 2005
21. Q1 Labs, Qradar product page, http://www.q1labs. com/products/prod-overview.html , Accessed September 27, 2005
22. Lakkaraju, Kiran, William Yurcik, and Adam J. Lee, "NVisionIP: netflow visualizations of system state for security situational awareness," VizSEC/DMSEC ?04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pages 65-72, ACM Press, New York, NY, 2004
23. McCanne, Steven and Van Jacobson, "The BSD packet filter: A new architecture for user-level packet capture," Proceedings of the 1993 Winter USENIX Conference, pp. 259-270, 1993
24. McPherson, Jonathan, Kwan-Liu Ma, Paul Krystosk, Tony Bartoletti, and Marvin Christensen, "Portvis: A tool for port-based detection of security events," VizSEC/DMSEC ?04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pp. 73-81, ACM Press, New York, NY, 2004
25. Ptacek, Thomas H., and Timothy N. Newsham, Insertion, evasion, and denial of service: Eluding network intrusion detection, Technical report, Secure Networks, Inc., Suite 330, 1201 5th Street S.W, Calgary, Alberta, Canada, T2R-0Y6, 1998
26. Roberts, Jonathan C., "Multiple-View and Multiform Visualization," Robert Erbacher, Alex Pang, Craig Wittenbrink, and Jonathan Roberts, editors, Visual Data Exploration and Analysis VII, Proceedings of SPIE, Vol. 3960, pp. 176-185, IS&T and SPIE, January, 2000
27. Shneiderman, Ben, "The eyes have it: A task by data type taxonomy for information visualizations," Technical Report UMCP-CSD CSTR-3665, University of Maryland Computer Science Department, 1996
28. tcpdump workers, Tcpdump public repository, http://www.tcpdump.org , Accessed September 27, 2005
29. Wojtczuk, Rafal, libnids homepage, http://libnids. sourceforge.net/ , Accessed May 5, 2005
30. Yin, Xiaoxin, William Yurcik, Michael Treaster, Yifan Li, and Kiran Lakkaraju, "Visflowconnect: netflow visualizations of link relationships for security situational awareness," VizSEC/DMSEC ?04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pp. 26-34, ACM Press, New York, NY, USA, 2004
31. Zalewski, Michal,Museum of broken packets, http:// lcamtuf.coredump.cx/mobp/ , Accessed May 6, 2005; 2003
32. Zissman, Marc, DARPA Intrusion Detection Evaluation Datasets, http://www.ll.mit.edu/IST/ ideval/data/1999/1999-data-index.html , Accessed September 27, 2005; 1999