Flame: A flow-level anomaly modeling engine

1st Workshop on Cyber Security Experimentation and Test, CSET 2008

Volumn , Issue , 2008, Pages

  Brauckhoff, Daniela ^a   Wagner, Arno ^a   May, Martin ^a  

^a ETH ZURICH   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY MODELS; BACKGROUND TRAFFIC; DETECTION MECHANISM; LOW-INTENSITY; NETWORK TRAFFIC; PROTOTYPE IMPLEMENTATIONS; TEST ENVIRONMENT; TRAFFIC TRACES;

ANOMALY DETECTION;

EID: 85084160250     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (12)

1. BRAUCKHOFF, D., TELLENBACH, B., WAGNER, A., MAY, M., AND LAKHINA, A. Impact of packet sampling on anomaly detection metrics. In IMC 2006 (2006).
2. DDoSVax. http://www.tik.ee.ethz.ch/~ddosvax/.
3. DÜBENDORFER, T., WAGNER, A., AND PLATTNER, B. A Framework for Real-Time Worm Attack Detection and Backbone Monitoring. In IWCIP 2005 (2005).
4. LAKHINA, A., CROVELLA, M., AND DIOT, C. Mining Anomalies Using Traffic Feature Distributions. In ACM SIGCOMM 2005 (2005).
5. LIPPMANN, R., FRIED, D., GRAF, I., HAINES, J., KENDALL, K., MCCLUNG, D., WEBER, D., WEBSTER, S., WYSCHOGROD, D., CUNNINGHAM, R., AND ZISSMAN, M. Evaluating Intrusion Detection Systems: The 1998 DARPA Offline Intrusion Detection Evaluation. In DARPA Information Survivability Conference (2000).
6. MCHUGH, J. The 1998 Lincoln Laboratory IDS Evaluation. In RAID 2000 (2000).
7. MIRKOVIC, J., WEI, S., HUSSAIN, A., WILSON, B., THOMAS, R., SCHWAB, S., FAHMY, S., CHERTOV, R., AND REIHER, P. DDoS benchmarks and experimenter’s workbench for the DETER testbed. In Tridentcom 2007 (2007).
8. RUPP, A., DREGER, H., FELDMANN, A., AND SOMMER, R. Packet trace manipulation framework for test labs. In IMC 2004 (2004).
9. SOMMERS, J., YEGNESWARAN, V., AND BARFORD, P. A framework for malicious workload generation. In IMC 2004 (2004).
10. TEIXEIRA, R., DUFFIELD, N. G., REXFORD, J., AND ROUGHAN, M. Traffic matrix reloaded: Impact of routing changes. In PAM 2005 (2005).
11. WAGNER, A., AND PLATTNER, B. Entropy based worm and anomaly detection in fast IP networks. In WET ICE 2005 (2005).
12. XU, K., ZHANG, Z.-L., AND BHATTACHARYYA, S. Profiling Internet backbone traffic: behavior models and applications. In SIGCOMM 2005 (2005).