A behavior-based online engine for detecting distributed cyber-attacks

研究成果: Chapter in Book/Report/Conference proceedingConference contribution

2 被引用数 (Scopus)

抄録

Distributed attacks have reportedly caused the most serious losses in recent years. Here, distributed attacks means those attacks conducted collaboratively by multiple hosts. How to detect distributed attacks has become one of the most important topics in the cyber security community. Many detection methods have been proposed, each of which, however, has its own weak points. For example, detection performance of information theory based methods strongly depends on the information theoretic measures and signature-based methods suffer from the fact that they can deal with neither new kinds of attacks nor new variants of existing attacks. Recently, behavior-based method has been attracting great attentions from many researchers and developers and it is thought as the most promising one. In behavior-based approaches, normal behavior modes are learned/extracted from past traffic data of the monitored network and are used to recognize anomalies in the future detection. In this paper, we explain how to implement an online behavior-based engine for detecting distributed cyber-attacks. Detection cases of our engine are also introduced and some actual attacks/incidents have been captured by our detection engine.

本文言語英語
ホスト出版物のタイトルInformation Security Applications - 17th International Workshop, WISA 2016, Revised Selected Papers
編集者Dooho Choi, Sylvain Guilley
出版社Springer Verlag
ページ79-89
ページ数11
ISBN(印刷版)9783319565484
DOI
出版ステータス出版済み - 1 1 2017
イベント17th International Workshop on Information Security Applications, WISA 2016 - Jeju Island, 大韓民国
継続期間: 8 25 20168 25 2016

出版物シリーズ

名前Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
10144 LNCS
ISSN(印刷版)0302-9743
ISSN(電子版)1611-3349

その他

その他17th International Workshop on Information Security Applications, WISA 2016
Country大韓民国
City Jeju Island
Period8/25/168/25/16

All Science Journal Classification (ASJC) codes

  • Theoretical Computer Science
  • Computer Science(all)

フィンガープリント 「A behavior-based online engine for detecting distributed cyber-attacks」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル