Bro: An Open Source Network Intrusion Detection System

Lecture Notes in Informatics (LNI), Proceedings - Series of the Gesellschaft fur Informatik (GI)

Volumn P-44, Issue , 2003, Pages 273-288

  Sommer, Robin ^a  

^a TECHNICAL UNIVERSITY OF MUNICH   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; NETWORK PROTOCOLS; OPEN SYSTEMS;

EVENT-DRIVEN APPROACH; HIGH VOLUMES; MATCHING ENGINES; NETWORK ACTIVITIES; NETWORK INTRUSION DETECTION SYSTEMS; OPEN-SOURCE NETWORK; SCRIPTING LANGUAGES; SIGNATURE-MATCHING; SOUND DESIGNS; UNDERLYING NETWORKS;

INTRUSION DETECTION;

EID: 85135280049     PISSN: 16175468     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. [Ber96] Daniel J. Bernstein. SYN cookies. http://cr.yp.to/syncookies.html, 1996.
2. [Bro] Bro. http://www.icir.org/vern/bro-info.html.
3. [Cis] Cisco Systems Inc. NetFlow Services and Applications - White paper. http://www.cisco.com/warp/public/cc/pd/iosw/ioft/neflct/tech/napps_wp.h%tm.
4. [Cve] CVE-2000-0778. http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2000-0778.
5. [Jac99] Kathleen Jackson. Intrusion Detection System Product Survey. Technical Report LA-UR-99-3883, Los Alamos National Laboratory, June 1999.
6. [Pax99] Vern Paxson. Bro: A System for Detecting Network Intruders in Real-Time. Computer Networks, 31(23–24):2435–2463, 1999.
7. [Pax02] Vern Paxson. The Bro 0.8 User Manual, 2002.
8. [Pca] libpcap. http://www.tcpdump.org.
9. [PN98] Thomas H. Ptacek and Timothy N. Newsham. Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection. Technical report, Secure Networks, Inc., January 1998.
10. [Roe99] Martin Roesch. Snort: Lightweight Intrusion Detection for Networks. In Proceedings of the 13th Conference on Systems Administration (LISA-99), pages 229–238. USENIX Association, November 1999.
11. [SP03a] Umesh Shankar and Vern Paxson. Active Mapping: Resisting NIDS Evasion Without Altering Traffic. In Proc. IEEE Symposium on Security and Privacy (to appear), 2003.
12. [SP03b] Robin Sommer and Vern Paxson. Enhancing Byte-Level Network Intrusion Detection Signatures with Context. In submission, 2003.
13. [Ssh] Vulnerability Note VU#945216. http://www.kb.cert.org/vuls/id/945216.
14. [ZP00] Yin Zhang and Vern Paxson. Detecting Stepping Stones. In Proceedings of the 9th USENIX Security Symposium (SECURITY-00), pages 171–184. The USENIX Association, August 2000.