Bridging the host-network divide: Survey, taxonomy, and solution

LISA 2006 - 20th Large Installation System Administration Conference

Volumn , Issue , 2006, Pages 247-262

  Fink, Glenn A ^a   Duggirala, Vyas ^a   Correa, Ricardo ^b   North, Chris ^a  

^a VIRGINIA POLYTECHNIC INSTITUTE AND STATE UNIVERSITY   (United States)

^b UNIVERSITY OF PENNSYLVANIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

HONING; INTRUSION DETECTION; NETWORK LAYERS; TAXONOMIES; TRANSMISSION CONTROL PROTOCOL; USER EXPERIENCE; VISUALIZATION;

CORRELATED DATA; END-TO-END ANALYSIS; KERNEL MODIFICATIONS; LITERATURE REVIEWS; SECURITY AWARENESS; SYSTEM ADMINISTRATION; SYSTEM ADMINISTRATORS; USABILITY STUDIES;

HOLMIUM COMPOUNDS;

EID: 85094313960     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (17)

1. Adore kernel-level rootkit, http://www.packet stormsecurity.org/groups/teso/ , last accessed July 2006
2. Cantrill, B., M. Shapiro, and A. Leventhal, "Dynamic Instrumentation of Production Systems," Proceedings of the 2004 Usenix Annual Technical Conference, 2004
3. Cantrill, B., "Hidden in Plain Sight," Queue, Vol. 4, Num. 1, pp. 26-36, http://doi.acm. org/10.1145/1117389.1117401, Feb., 2006
4. Card, S. K., J. D. Mackinlay, and B. Shneiderman, "Information Visualization," in Card, S. K., J. D. Mackinlay, and B. Shneiderman, eds. Readings in information visualization: Using vision to think, Morgan Kaufmann Publishers, San Francisco, Calif., pp. 1-34, 1999
5. eHealth, A network management tool owned by Computer Associates, Inc., http://www.concord. com/products/network-mgt.shtml , Last accessed July, 2006
6. Fink, G. A., P. Muessig, and C. North, Visual Simultaneous Correlation of Host Processes and Network Traffic
7. Foundstone, Inc.?s free forensic tools, http://www.foundstone.com/resources/freetools. htm , Last accessed July, 2006
8. Li, Q. and C. North, "Empirical Comparison of Dynamic Query Sliders and Brushing Histograms," Proceedings of IEEE Symposium on Information Visualization 2003, pp. 147-154, 2003
9. LRK5 kernel-level rootkit, http://packetstorm security.org/UNIX/penetration/rootkits/lrk5.src.Tar.gz , Last accessed July, 2006
10. Zimmermann, Hubert, "OSI Reference Model ? The ISO Model of Architecture for Open Systems Interconnection," IEEE Transactions on Communications, Vol. 28, Num. 4, pp. 425-432, April, 1980
11. RFC 1122, "Requirements for Internet Hosts ? Communication Layers," http://tools.ietf. org/html?rfc=1122 , Last accessed July, 2006
12. RFC 791, "Internet Protocol," September, 1981 (See also: MIL-STD-1777)
13. RFC 793, Transmission Control Protocol, September, 1981 (See also: MIL-STD-1778)
14. ProcessExplorer, http://www.sysinternals. com/Utilities/ProcessExplorer.html , Last accessed September, 2006
15. TCPViewPro, http://www.sysinternals. com/Utilities/TcpView.html , Last accessed Sep., 2006
16. User Mode Linux, http://user-mode-linux. sourceforge.net/ , Last accessed July, 2006
17. Zone Alarm Pro, Zone Labs, Inc., San Francisco, CA 94107, USA, 2003, http://www. zonelabs.com/ , Last accessed August, 2005