Detection of network buffer overflow attacks: A case study

This paper presents an automated detection method based on classification of network traffic using predefined set of network metrics. We proposed the set of metrics with focus on behavior of buffer overflow attacks and their sufficient description without the need of deep packet inspection. In this...

Celý popis

Uložené v:
Podrobná bibliografia
Vydané v:2013 47th International Carnahan Conference on Security Technology (ICCST) s. 1 - 4
Hlavní autori: Barabas, Maros, Homoliak, Ivan, Kacic, Matej, Hanicek, Petr
Médium: Konferenčný príspevok..
Jazyk:English
Vydavateľské údaje: IEEE 01.10.2013
Predmet:
Approximation methods
buffer overflow
detection
ids
Indexes
Measurement
network metrics
ISSN:1071-6572
On-line prístup:Získať plný text
Tagy: Pridať tag
Žiadne tagy, Buďte prvý, kto otaguje tento záznam!
Popis
Shrnutí:This paper presents an automated detection method based on classification of network traffic using predefined set of network metrics. We proposed the set of metrics with focus on behavior of buffer overflow attacks and their sufficient description without the need of deep packet inspection. In this paper we describe two laboratory experiments of automated detection of buffer overflow attacks on vulnerable network services and their description by proposed set of network metrics. We present the principles of several chosen network metrics and their application on experimental attacks according to their nature in comparison to valid communication.
ISSN:1071-6572
DOI:10.1109/CCST.2013.6922067