Mapping internet sensors with probe response attacks

14th USENIX Security Symposium

Volumn , Issue , 2005, Pages 193-208

  Bethencourt, John ^a   Franklin, Jason ^a   Vernon, Mary ^a  

^a University of Wisconsin   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SENSOR NETWORKS; STORMS;

ANONYMIZATION; BLOOM FILTERS; INTERNET COMMUNITIES; INTERNET TRAFFIC; LOG ANALYSIS; MALICIOUS TRAFFIC; PUBLIC REPORTS; SENSOR LOCATION;

LOCATION;

EID: 85058835823     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (40)

1. The SANS Internet Storm Center, http://isc.sans.org.
2. CAIDA, the Cooperative Association for Internet Data Analysis, http://www.caida.org.
3. Computer Emergency Response Team. AirCERT. http://www.cert.org/kb/aircert/, 2003.
4. C. Zou, L. Gao, W. Gong, and D. Towsley. Monitoring and Early Warning for Internet Worms. Proceedings of CCS’03, October 2003.
5. The National Strategy to Secure Cyberspace, http://www.securecyberspace.gov.
6. V. Yegneswaran, P. Barford, and S. Jha. Global Intrusion Detection in the DOMINO Overlay System. Proceedings of the 2004 Network and Distributed System Security Symposium (NDSS 2004), February 2004.
7. M. Locasto, J. Parekh, S. Stolfo, A. Keromytis, T. Malkin, and V. Misra. Collaborative Distributed Intrusion Detection. Tech Report CUCS-012-04, Department of Computer Science, Columbia University, 2004.
8. N. Provos. Honeyd - a virtual honeypot daemon. Proceedings of the 10th DFN-CERT Workshop, February 2003.
9. L. Spitzner. Know Your Enemy: Honeynets. Honeynet Project, http://project.honeynet.org/papers/ honeynet.
10. V. Yegneswaran, P. Barford, and D. Plonka. On the Design and Utility of Internet Sinks for Network Abuse Monitoring. Proceedings of Symposium on Recent Advances in Intrusion Detection (RAID), September 2003.
11. D. Moore. Network Telescopes: Observing Small or Distant Security Events. Invited Presentation at the 11th USENIX Security Symposium (SEC 02), August 2002.
12. V. Yegneswaran, P. Barford, and J. Ullrich. Internet Intrusions: Global Characteristics and Prevalence. Proceedings of ACM SIG-METRICS, June 2003.
13. R. Pang, V. Yegneswaran, P. Barford, V. Paxson, and L. Peterson. Characteristics of Internet Background Radiation, Proceedings of ACM SIGCOMM/USENIX Internet Measurement Conference, October 2004.
14. H. Kim and B. Karp. Autograph: Toward Automated, Distributed Worm Signature Detection. USENIX Security Symposium, 2004.
15. C. Kreibich and J. Crowcroft. Honeycomb — Creating Intrusion Detection Signatures Using Honeypots. Proceedings of the IEEE Symposium on Security and Privacy, May 2004.
16. S. Singh, C. Estan, G. Varghese, and S. Savage. The EarlyBird System for Real-time Detection of Unknown Worms. Technical Report CS2003-0761, UCSD, August 2003.
17. Symantec DeepSight Threat Management System Technology Brief
18. The myNetWatchman Project, http://www.mynetwatchman.com.
19. The University of Michigan Motion Sensor, http://ims.eecs.umich.edu.
20. M. Bailey, E. Cooke, F. Jahanian, J. Nazario, and D. Watson. The Internet Motion Sensor: A Distributed Blackhole Monitoring System. Proceedings of the 12th Annual Network and Distributed System Security Symposium, February 2005.
21. D. Moore, C. Shannon, and J. Brown. Code-Red: A Case Study on the spread and victims of an Internet worm. Proceedings of the 2nd ACM Internet Measurement Workshop, pages 273-284. ACM Press, November 2002.
22. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver. Inside the Slammer Worm. IEEE Security and Privacy, 1(4):33-29, July 2003.
23. D. Moore, G. Voelker, and S. Savage. Inferring Internet Denial-of-Service Activity. Proceedings of USENIX Security Symposium, 2001.
24. B. Bloom. Space/Time Trade-Offs in Hash Coding With Allowable Errors. Communications of the ACM, 1970. 13(7): p. 422-426.
25. P. Gross, J. Parekh, and G. Kaiser. Secure “Selecticast” for Collaborative Intrusion Detection Systems. Proceedings of the 3rd International Workshop on Distributed Event-Based Systems (DEBS’04), May 2004.
26. A. Slagell, J. Wang, and W. Yurcik. Network Log Anonymization: Application of Crypto-PAn to Cisco Netflows. Proceedings of the Workshop on Secure Knowledge Management 2004, September 2004.
27. G. Minshall. TCPdpriv: Program for Eliminating Confidential Information from Traces. Ipsilon Networks, Inc. http://ita.ee.lbl.gov/html/contrib/tcpdpriv.html
28. J. Xu, J. Fan, M. Ammar, and S. Moon. Prefix-Preserving IP Address Anonymization: Measurement-based Security Evaluation and a New Cryptography-based Scheme. Proceedings of the 10th IEEE International Conference on Network Protocols (ICNP’02), November 2002.
29. S. Staniford, V. Paxson, and N. Weaver. How to 0wn the Internet in Your Spare Time. Proceedings of the 11th USENIX Security Symposium, 2002.
30. P. Lincoln, P. Porras, and V. Shmatikov. Privacy-Preserving Sharing and Correlation of Security Alerts. Proceedings of the 13th USENIX Security Symposium, 2004.
31. A. Slagell and W. Yurcik. Sharing Computer Network Logs for Security and Privacy: A Motivation for New Methodologies of Anonymization. ACM Computing Research Repository (CoRR) Technical Report 0409005, September 2004.
32. R. Pang and V. Paxson. A High-level Programming Environment for Packet Trace Anonymization and Transformation. Proceedings of SIGCOMM 2003, August 2003.
33. K. Carr and D. Duffy. Taking the Internet by storm. CSOonline.com, April 2003.
34. The DShield Project, http://www.dshield.org.
35. D.Z. Du, F. Hwang. Combinatorial Group Testing and Its Applications, World Scientific, Singapore, 2000.
36. The Cymru Project Bogon List, http://www.cymru.com/Bogons/.
37. Symantec Internet Security Threat Report, Volume VI, September 2004.
38. B. Lampson. A Note on the Confinement Problem. Communications of the ACM 16, 10 (Oct. 1973), p. 613-615.
39. L. von Ahn, M. Blum, N. Hopper, and J. Langford. CAPTCHA: Using Hard AI Problems for Security. EUROCRPYT 2003.
40. T. Chown. IPv6 Implications for TCP/UDP Port Scanning. IETF Internet Work In Progress Draft, July 2004.