Matches in SemOpenAlex for { <https://semopenalex.org/work/W204335763> ?p ?o ?g. }
Showing items 1 to 76 of
76
with 100 items per page.
- W204335763 abstract "Network attacks often employ scanning to locate vulnerable hosts and services. Unimpeded scanning can lead to the subversion of an entire vulnerable population in a matter of minutes. Fast and accurate detection of local scanners is key to contain a spreading epidemic in its early stage. Existing scan detection schemes can detect fast scanners whose behavior can be clearly delineated from that of legitimate traffic. Detecting slow scanners, however, is more difficult. The difficulty arises partially from the fact that these detection schemes use statically determined detection criteria, and as a result do not respond well to traffic perturbations. In this paper, we present two adaptive scan detection schemes, Success Based (SB) and Failure Based (FB), both of which change detection criteria dynamically based on traffic statistics. FB is designed for fast detection and is particularly well suited for controlled computing environments with well-understood traffic characteristics. SB is more versatile and able to perform well in a wide range of traffic scenarios. We evaluate the proposed schemes analytically as well as empirically using real traffic and attack traces. Our results show that against fast scanners, the adaptive schemes are able to render similar detection precision as the traditional static schemes. For slow scanners, however, the adaptive schemes are much more effective, both in terms of detection precision and speed. Specifically, both SB and FB have non-linear properties not present in other schemes. These properties permit a lower Sustained Scanning Threshold and a robustness against perturbations in the background traffic." @default.
- W204335763 created "2016-06-24" @default.
- W204335763 creator A5011263744 @default.
- W204335763 creator A5091848843 @default.
- W204335763 date "2006-01-01" @default.
- W204335763 modified "2023-09-24" @default.
- W204335763 title "Fast Detection of Local Scanners Using Adaptive Methods" @default.
- W204335763 cites W1516506771 @default.
- W204335763 cites W1527422375 @default.
- W204335763 cites W1566161340 @default.
- W204335763 cites W1597305440 @default.
- W204335763 cites W1674877186 @default.
- W204335763 cites W1744212210 @default.
- W204335763 cites W1781758015 @default.
- W204335763 cites W2117002131 @default.
- W204335763 cites W2137786570 @default.
- W204335763 cites W2152374361 @default.
- W204335763 cites W2159919478 @default.
- W204335763 cites W2169672133 @default.
- W204335763 cites W88694106 @default.
- W204335763 hasPublicationYear "2006" @default.
- W204335763 type Work @default.
- W204335763 sameAs 204335763 @default.
- W204335763 citedByCount "1" @default.
- W204335763 crossrefType "journal-article" @default.
- W204335763 hasAuthorship W204335763A5011263744 @default.
- W204335763 hasAuthorship W204335763A5091848843 @default.
- W204335763 hasConcept C104317684 @default.
- W204335763 hasConcept C144024400 @default.
- W204335763 hasConcept C149923435 @default.
- W204335763 hasConcept C185592680 @default.
- W204335763 hasConcept C26517878 @default.
- W204335763 hasConcept C2908647359 @default.
- W204335763 hasConcept C38652104 @default.
- W204335763 hasConcept C41008148 @default.
- W204335763 hasConcept C55493867 @default.
- W204335763 hasConcept C63479239 @default.
- W204335763 hasConcept C79403827 @default.
- W204335763 hasConceptScore W204335763C104317684 @default.
- W204335763 hasConceptScore W204335763C144024400 @default.
- W204335763 hasConceptScore W204335763C149923435 @default.
- W204335763 hasConceptScore W204335763C185592680 @default.
- W204335763 hasConceptScore W204335763C26517878 @default.
- W204335763 hasConceptScore W204335763C2908647359 @default.
- W204335763 hasConceptScore W204335763C38652104 @default.
- W204335763 hasConceptScore W204335763C41008148 @default.
- W204335763 hasConceptScore W204335763C55493867 @default.
- W204335763 hasConceptScore W204335763C63479239 @default.
- W204335763 hasConceptScore W204335763C79403827 @default.
- W204335763 hasLocation W2043357631 @default.
- W204335763 hasOpenAccess W204335763 @default.
- W204335763 hasPrimaryLocation W2043357631 @default.
- W204335763 hasRelatedWork W225851212 @default.
- W204335763 hasRelatedWork W2761391025 @default.
- W204335763 hasRelatedWork W2782643666 @default.
- W204335763 hasRelatedWork W2807035766 @default.
- W204335763 hasRelatedWork W2917909748 @default.
- W204335763 hasRelatedWork W2923092103 @default.
- W204335763 hasRelatedWork W2981536017 @default.
- W204335763 hasRelatedWork W3093776902 @default.
- W204335763 hasRelatedWork W3099059128 @default.
- W204335763 hasRelatedWork W3102776903 @default.
- W204335763 hasRelatedWork W3111303284 @default.
- W204335763 hasRelatedWork W3113400820 @default.
- W204335763 hasRelatedWork W3126166837 @default.
- W204335763 hasRelatedWork W3149789106 @default.
- W204335763 hasRelatedWork W3153953528 @default.
- W204335763 hasRelatedWork W3180597548 @default.
- W204335763 hasRelatedWork W3193040822 @default.
- W204335763 hasRelatedWork W3198925698 @default.
- W204335763 hasRelatedWork W2556937271 @default.
- W204335763 hasRelatedWork W2957975884 @default.
- W204335763 isParatext "false" @default.
- W204335763 isRetracted "false" @default.
- W204335763 magId "204335763" @default.
- W204335763 workType "article" @default.