Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection

Keywords

Denial-of-service attack, Computer science, Intrusion detection system, Evasion (ethics), Computer security

References

• Live Traffic Analysis of TCP/IP GatewaysPhillip Porras, Alfonso Valdes — 1998
• Bro: a system for detecting network intruders in real-timeVern Paxson — 1998
• A Simple Active Attack Against TCPLaurent Joncheray — 1995
• TCP Extensions for High PerformanceD. Borman, B. Braden, Van Jacobson — 1992
• End-to-end Internet packet dynamicsVern Paxson — 1997
• Security Architecture for the Internet ProtocolR. Atkinson — 1995
• A Methodology for Testing Intrusion Detection SystemsN. Puketza, K. Zhang, Mui Ken Chung — 1996
• Authentication serverMartin Johns — 1985
• Internet ProtocolJ. Postel — 1981
• Security Architecture for the Internet ProtocolS. Kent, R. Atkinson — 1998
• GrIDS A Graph-Based Intrusion Detection System for Large NetworksStuart Staniford-Chen, Steven Cheung, Rick Crawford — 1996
• TCP/IP IllustratedW. Richard Stevens — 1994
• A common intrusion detection frameworkC. E. Kahn, Phillip A. Porras, Stuart Staniford-Chen — 2000
• Transmission control protocol: darpa internet program protocol specificationPurificación Matute — 1981
• Transmission control protocol- darpa internet program protocol specificationJ. P. Ed — 1981
• Internet ProtocolJ. Postel — 1981

Cited by

• Hardware acceleration of network intrusion detection and preventionBrendan Cronin — 2014
• Improving Self Organizing Map Performance for Network Intrusion DetectionStefano Zanero — 2005
• A Framework for Distributed Intrusion Detection using Interest-Driven Cooperative AgentsRajeev Gopalakrishna — 2001
• Anonymization of real data for IDS benchmarkingVidar Evenrud Seeberg — 2006
• Categorizing Network Attacks Using Pattern Classification AlgorithmsGeorge E. Noel — 2002
• PHAD: packet header anomaly detection for identifying hostile network trafficMatthew V. Mahoney, Philip K. Chan — 2001
• Bro: An Open Source Network Intrusion Detection SystemRobin Sommer — 2003
• Evaluation of the Intrusion Detection Capabilities and Performance of a Security Operation CenterAbdoul Karim Ganame, Julien Bourgeois, Renaud Bidou — 2006
• What do we mean by Network Denial of ServiceClay Shields — 2002
• Modeling NIDS Evasion with Genetic ProgrammingSergio Pastrana, Agustín Orfila, Arturo Ribagorda — 2010
• Steps for Improving Data Comprehension for Digital Security and ForensicsRobert F. Erbacher — 2008
• Intrusion detection: Forensic computing insights arising from a case study on SNORTVlasti Broucek, Paul Turner — 2003
• Generic detection of code injection attacks using network-level emulationΜιχαήλ Πολυχρονάκης — 2009
• Therminator : configuring the underlying statistical mechanics modelD.W. Ettlich — 2003
• Fast Multipattern Matching for Intrusion DetectionTarek Abbes, Michaël Rusinowitch — 2004
• Towards Faster String Matching for Intrusion DetectionJason Coit, Stuart Staniford — 2001
• Commercial Internet and the need for securityBernard Zeutzius — 1997
• Distributed Metastasis : A Computer Network Penetration MethodologyAndrew J. Stewart — 1999
• An Efficient Intrusion Detection System for Networks with Centralized RoutingPaulo F. Andrade, Fernando M. Silva, Carlos Ribeiro — 2007
• An efficient multi-hash pattern matching scheme for intrusion detection in FPGA-based reconfiguring hardwareByoungkoo Kim, Seungyong Yoon, Jintae Oh — 2008

Related papers

• Vigilante: end-to-end containment of internet wormsManuel Costa, Jon Crowcroft, Miguel Castro — 2005
• Throttling viruses: restricting propagation to defeat malicious mobile codeMatthew M. Williamson — 2002
• ReVirt: enabling intrusion analysis through virtual-machine logging and replayGeorge W. Dunlap, Samuel T. King, Sukru Cinar — 2002
• Internet quarantine: requirements for containing self-propagating codeDavid Moore, Colleen Shannon, Geoffrey M. Voelker — 2003
• Dynamic Taint Analysis for Automatic Detection, Analysis, and SignatureGeneration of Exploits on Commodity SoftwareJames Newsome, Dawn Song — 2005