Enterprise Security: A Community of Interest Based Approach

Proceedings of the Symposium on Network and Distributed System Security, NDSS 2006

Volumn , Issue , 2006, Pages

  McDaniel, Patrick ^a   Sen, Subhabrata ^b   Spatscheck, Oliver ^b   Van der Merwe, Jacobus ^b   Aiello, Bill ^c   Kalmanek, Charles ^b  

^a PENNSYLVANIA STATE UNIVERSITY   (United States)

^b AT AND T LABS RESEARCH   (United States)

^c UNIVERSITY OF BRITISH COLUMBIA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK SECURITY; SECURITY SYSTEMS;

BROWNFIELDS; COMMUNICATION PATTERN; COMMUNITY OF INTEREST; ENTERPRISE NETWORKS; ENTERPRISE SECURITY; LARGE ENTERPRISE; MALWARES; MISSION-CRITICAL COMMUNICATION; SECURITY POLICY; WORM ATTACK;

MALWARE;

EID: 85081774740     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. K. Al-Tawil and I. A. Al-Kaltham. Evaluation and testing of internet firewalls. International Journal of Network Management, 9(3):135–149, 1999.
2. Y. Bartal, A. J. Mayer, K. Nissim, and A. Wool. Firmato: A novel firewall management toolkit. In IEEE Symposium on Security and Privacy, pages 17–31, 1999.
3. S. Bellovin. Distributed Firewalls. ;login:, pages 39–47, Nov. 1999.
4. W. Cheswick and S. Bellovin. Firewalls and Internet Security: Repelling the Wily Hacker. Addison-Wesley, Reading, MA, 1994.
5. Chuck Cranor et. al. Gigascope: a stream database for network applications. In Proceedings of ACM SIGMOD, June 2003.
6. Cooperative Association for Internet Data Analysis (CAIDA). The Spread of the Witty Worm, March 2004. http://www.caida.org/analysis/security/witty/.
7. T. Hastie, R. Tibshirani, and J. Friedman. The Elements of Statistical Learning: Data Mining, Inference and Prediction. Springer, 2001.
8. M. Hicks. Dynamic Software Updating. PhD thesis, Department of Computer and Information Science, University of Pennsylvania, August 2001. Winner of the 2002 ACM SIGPLAN Doctoral Dissertation award.
9. S. Ioannidis, A. D. Keromytis, S. Bellovin, and J. M. Smith. Implementing a Distributed Firewall. In Proceedings of Computer and Communications Security (CCS) 2000, pages 190–199, Nov. 2000. Athens, Greece.
10. A. Mayer, A. Wool, and E. Ziskind. Fang: A Firewall Analysis Engine. In 2000 IEEE Symposium on Security and Privacy, pages 177–187. IEEE, May 2000. Oakland, CA.
11. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. W. ver. Inside the slammer worm. IEEE Security and Privacy, 1(4):33–39, 2003.
12. D. Moore, C. Shannon, G. M. Voelker, and S. Savage. Internet Quarantine: Requirements for Containing Self-Propagating Code. In Proceedings of IEEE INFOCOM 2003. IEEE, March 2003. San Francisco, CA.
13. S. Staniford. Containment of Scanning Worms in Enterprise Networks. Journal of Computer Security, 2004. to appear.
14. S. Staniford, V. Paxson, and N. Weaver. How to own the internet in your spare time. In Proceedings of the 11th USENIX Security Symposium, pages 149–167. USENIX Association, 2002.
15. S. Staniford-Chen, S. Cheung, R. Crawford, M. Dilger, J. Frank, J. Hoagland, K. Levitt, C. Wee, R. Yip, and D. Zerkle. GrIDS A Graph-Based Intrusion Detection System for Large Networks. In Proceedings of the 19th National Information Systems Security Conference, 1996.
16. W. Aiello, C. Kalmanek, P. McDaniel, S. Sen, O. Spatscheck and J. Van der Merwe. Analysis of Communities of Interest in Data Networks, March 2005. Passive and Active Measurement Workshop.
17. M. M. Williamson. Throttling viruses: Restricting propagation to defeat malicious mobile code. In Proceedings of the 18th Annual Computer Security Applications Conference, pages 61–68. IEEE Computer Society, 2002.
18. A. Wool. Architecting the Lumeta Firewall Analyzer. In Proceedings of the 10th USENIX Security Symposium, pages 85–97, August 2001. Washington, DC.