Detailed Information on Publication Record
2011
A Flow-Level Taxonomy and Prevalence of Brute Force Attacks
VYKOPAL, JanBasic information
Original name
A Flow-Level Taxonomy and Prevalence of Brute Force Attacks
Authors
VYKOPAL, Jan (203 Czech Republic, guarantor, belonging to the institution)
Edition
Berlin, Advances in Computing and Communications, p. 666-675, 10 pp. 2011
Publisher
Springer Berlin Heidelberg
Other information
Language
English
Type of outcome
Stať ve sborníku
Field of Study
10201 Computer sciences, information science, bioinformatics
Country of publisher
Germany
Confidentiality degree
není předmětem státního či obchodního tajemství
Publication form
printed version "print"
References:
RIV identification code
RIV/00216224:14610/11:00050706
Organization unit
Institute of Computer Science
ISBN
978-3-642-22714-1
UT WoS
000308380600069
Keywords in English
netflow; taxonomy; prevalence; brute force attack; SSH
Změněno: 19/7/2013 10:17, doc. RNDr. Jan Vykopal, Ph.D.
Abstract
V originále
Online brute force and dictionary attacks against network services and web applications are ubiquitous. We present their taxonomy from the perspective of network flows. This contributes to clear evaluation of detection methods and provides better understanding of the brute force attacks within the research community. Next, we utilize the formal definitions of attacks in a long-term analysis of SSH traffic from 10 gigabit university network. The results shows that flow-based intrusion detection may profit from traffic observation of the whole network, particularly it can allow more accurate detection of the majority of brute-force attacks in high-speed networks.
Links
| OVMASUN200801, research and development project |
|