Replication: Network-based Lateral Movement Detection Methods
Using Machine Learning

D 2025

Replication: Network-based Lateral Movement Detection Methods Using Machine Learning

BOUČEK, Vladimír a Martin HUSÁK

Základní údaje

Originální název

Replication: Network-based Lateral Movement Detection Methods Using Machine Learning

Autoři

BOUČEK, Vladimír a Martin HUSÁK

Vydání

New York, NY, 21st International Conference on Network and Service Management, od s. 1-6, 6 s. 2025

Nakladatel

IEEE

Další údaje

Jazyk

angličtina

Typ výsledku

Stať ve sborníku

Obor

10200 1.2 Computer and information sciences

Utajení

není předmětem státního či obchodního tajemství

Forma vydání

elektronická verze "online"

Odkazy

URL

Označené pro přenos do RIV

Ano

Kód RIV

RIV/00216224:14330/25:00142397

Organizační jednotka

Fakulta informatiky

ISBN

978-3-903176-75-1

DOI

https://doi.org/10.23919/CNSM67658.2025.11297412

EID Scopus

2-s2.0-105032096515

Klíčová slova anglicky

lateral movement; pivoting; link prediction

Příznaky

Mezinárodní význam, Recenzováno

Změněno: 1. 4. 2026 11:10, RNDr. Pavel Šmerk, Ph.D.

Anotace

V originále

Pivoting is a technique commonly employed by advanced adversaries to perform lateral movement within a network. In this process, an attacker leverages an intermediary host to relay commands to otherwise inaccessible systems. In this work, we survey the current state-of-the-art lateral movement detection techniques and identify approaches best suited for detecting pivoting behavior. Specifically, we focus on methods analyzing network traffic, not system logs, since we are looking for network-wide solution. We present the results of a replicability study, in which we find that only a few proposed approaches also publish a usable implementation, but their results are promising.

Přiložené soubory

2025-CNSM-Pivoting_detection-paper.pdf Verze souboru

2025-CNSM-Pivoting_detection-slides.pdf

Citovat

BOUČEK, Vladimír a Martin HUSÁK. Replication: Network-based Lateral Movement Detection Methods Using Machine Learning. Online. In Walter Cerroni, Mauro Tortonesi, Davide Borsatti, Alberto Egon Schaeffer-Filho, Daphné Tuncer, Jérôme François, Martin Husák. 21st International Conference on Network and Service Management. New York, NY: IEEE, 2025, s. 1-6. ISBN 978-3-903176-75-1. Dostupné z: https://doi.org/10.23919/CNSM67658.2025.11297412.

@inproceedings{2529245,
   author = {Bouček, Vladimír and Husák, Martin},
   address = {New York, NY},
   booktitle = {21st International Conference on Network and Service Management},
   doi = {https://doi.org/10.23919/CNSM67658.2025.11297412},
   editor = {Walter Cerroni, Mauro Tortonesi, Davide Borsatti, Alberto Egon Schaeffer-Filho, Daphné Tuncer, Jérôme François, Martin Husák},
   keywords = {lateral movement; pivoting; link prediction},
   howpublished = {elektronická verze "online"},
   language = {eng},
   location = {New York, NY},
   isbn = {978-3-903176-75-1},
   pages = {1-6},
   publisher = {IEEE},
   title = {Replication: Network-based Lateral Movement Detection Methods Using Machine Learning},
   url = {https://opendl.ifip-tc6.org/db/conf/cnsm/cnsm2025/1571196179.pdf},
   year = {2025}
}

TY  - CONF
ID  - 2529245
AU  - Bouček, Vladimír - Husák, Martin
PY  - 2025
TI  - Replication: Network-based Lateral Movement Detection Methods Using Machine Learning
PB  - IEEE
CY  - New York, NY
SN  - 9783903176751
KW  - lateral movement
KW  - pivoting
KW  - link prediction
UR  - https://opendl.ifip-tc6.org/db/conf/cnsm/cnsm2025/1571196179.pdf
N2  - Pivoting is a technique commonly employed by advanced adversaries to perform lateral movement within a network. In this process, an attacker leverages an intermediary host to relay commands to otherwise inaccessible systems. In this work, we survey the current state-of-the-art lateral movement detection techniques and identify approaches best suited for detecting pivoting behavior. Specifically, we focus on methods analyzing network traffic, not system logs, since we are looking for network-wide solution. We present the results of a replicability study, in which we find that only a few proposed approaches also publish a usable implementation, but their results are promising.
ER  -

BOUČEK, Vladimír a Martin HUSÁK. Replication: Network-based Lateral Movement Detection Methods Using Machine Learning. Online. In Walter Cerroni, Mauro Tortonesi, Davide Borsatti, Alberto Egon Schaeffer-Filho, Daphné Tuncer, Jérôme Fran\c cois, Martin Husák. \textit{21st International Conference on Network and Service Management}. New York, NY: IEEE, 2025, s.~1-6. ISBN~978-3-903176-75-1. Dostupné z: https://doi.org/10.23919/CNSM67658.2025.11297412.

Přehled o publikaci