Detection of network buffer overflow attacks: A case study

This paper presents an automated detection method based on classification of network traffic using predefined set of network metrics. We proposed the set of metrics with focus on behavior of buffer overflow attacks and their sufficient description without the need of deep packet inspection. In this...

Full description

Saved in:
Bibliographic Details
Published in:2013 47th International Carnahan Conference on Security Technology (ICCST) pp. 1 - 4
Main Authors: Barabas, Maros, Homoliak, Ivan, Kacic, Matej, Hanicek, Petr
Format: Conference Proceeding
Language:English
Published: IEEE 01.10.2013
Subjects:
Approximation methods
buffer overflow
detection
ids
Indexes
Measurement
network metrics
ISSN:1071-6572
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:This paper presents an automated detection method based on classification of network traffic using predefined set of network metrics. We proposed the set of metrics with focus on behavior of buffer overflow attacks and their sufficient description without the need of deep packet inspection. In this paper we describe two laboratory experiments of automated detection of buffer overflow attacks on vulnerable network services and their description by proposed set of network metrics. We present the principles of several chosen network metrics and their application on experimental attacks according to their nature in comparison to valid communication.
ISSN:1071-6572
DOI:10.1109/CCST.2013.6922067