کد مقاله کد نشریه سال انتشار مقاله انگلیسی نسخه تمام متن
455620 695516 2015 18 صفحه PDF دانلود رایگان
عنوان انگلیسی مقاله ISI
Detecting stealthy attacks: Efficient monitoring of suspicious activities on computer networks
موضوعات مرتبط
مهندسی و علوم پایه مهندسی کامپیوتر شبکه های کامپیوتری و ارتباطات
پیش نمایش صفحه اول مقاله
Detecting stealthy attacks: Efficient monitoring of suspicious activities on computer networks
چکیده انگلیسی


• A scalable monitoring scheme for stealthy attacks on computer networks is presented.
• Bayesian fusion along with traffic sampling is used as a data reduction method.
• Stealthy activities can be detected using 10–20% size sampling rates.
• A tracing algorithm for anonymous stealthy activities to their sources is presented.
• The effect of network parameters on detection is investigated.

Stealthy attackers move patiently through computer networks – taking days, weeks or months to accomplish their objectives in order to avoid detection. As networks scale up in size and speed, monitoring for such attack attempts is increasingly a challenge. This paper presents an efficient monitoring technique for stealthy attacks. It investigates the feasibility of proposed method under number of different test cases and examines how design of the network affects the detection. A methodological way for tracing anonymous stealthy activities to their approximate sources is also presented. The Bayesian fusion along with traffic sampling is employed as a data reduction method. The proposed method has the ability to monitor stealthy activities using 10–20% size sampling rates without degrading the quality of detection.

Figure optionsDownload as PowerPoint slide

ناشر
Database: Elsevier - ScienceDirect (ساینس دایرکت)
Journal: Computers & Electrical Engineering - Volume 47, October 2015, Pages 327–344
نویسندگان
, , , , ,