NDLI: Network scan detection with LQS: a lightweight, quick and stateful algorithm

Please wait, while we are loading the content...

Improved Nguyen-Vidick heuristic sieve algorithm for shortest vector problem

Automatic construction of jump-oriented programming shellcode (on the x86)

Identity-based online/offline key encapsulation and encryption

Enhancing the trust of internet routing with lightweight route attestation

Tracer: enforcing mandatory access control in commodity OS with the support of light-weight intrusion detection and tracing

WebPatrol: automated collection and replay of web-based malware scenarios

Secure mobile subscription of sensor-encrypted data

Threshold ring signature without random oracles

Extended cubes: enhancing the cube attack by extracting low-degree non-linear equations

A software-based root-of-trust primitive on multicore platforms

On the security of the identity-based encryption based on DHIES from ASIACCS 2010

Quantified risk-adaptive access control for patient privacy protection in health information systems

Stronger security model of group key agreement

MLAS: multiple level authentication scheme for VANETs

Towards mechanisms for detection and prevention of data exfiltration by insiders: keynote talk paper

Jump-oriented programming: a new class of code-reuse attack

Compact identity-based encryption without strong symmetric cipher

Network scan detection with LQS: a lightweight, quick and stateful algorithm

Confidentiality-preserving proof theories for distributed proof systems

Malware propagation in online social networks: nature, dynamics, and defense implications

Efficient audit-based compliance for relational data retention

On the invisibility of designated confirmer signatures

Attack on the GridCode one-time password

An ontology- and Bayesian-based approach for determining threat probabilities

How to design space efficient revocable IBE from non-monotonic ABE

EASiER: encryption-based access control in social networks with efficient revocation

Leakage resilient eCK-secure key exchange protocol without random oracles

On mouse dynamics as a behavioral biometric for authentication

ROPdefender: a detection tool to defend against return-oriented programming attacks

Strongly secure certificateless key exchange without pairing

An integrated approach to cryptographic mitigation of denial-of-service attacks

PUF ROKs: a hardware approach to read-once keys

Characterizing kernel malware behavior with kernel data access patterns

Mind how you answer me!: transparently authenticating the user of a smartphone when answering or placing a call

Bounded vector signatures and their applications

Rethinking about guessing attacks

Attacks against process control systems: risk assessment, detection, and response

Multi-authority ciphertext-policy attribute-based encryption with accountability

Diesel: applying privilege separation to database access

Efficient computational oblivious transfer using interactive hashing

On the effectiveness of anonymizing networks for web search privacy

Examining indistinguishability-based security models for key exchange protocols: the case of CK, CK-HMQV, and eCK

Boosting the scalability of botnet detection using adaptive traffic sampling

Efficient symbolic automated analysis of administrative attribute-based RBAC-policies

Detecting stealthy malware with inter-structure and imported signatures

Practical affiliation-hiding authentication from improved polynomial interpolation

Formal modelling and automatic detection of resource exhaustion attacks

Non-uniform distributions in quantitative information-flow

1-out-of-2 signature

Separation of duties as a service

Optimal message transmission protocols with flexible parameters

Self destructive tamper response for software protection

An efficient mobile PACE implementation

Self-certified ring signatures

Receipt-mode trust negotiation: efficient authorization through outsourced interactions

How to search linear approximation for large non-surjective S-box

Deriving common malware behavior through graph clustering

Server-aided signatures verification secure against collusion attack

A new and extended fault analysis on RSA

Towards a binary integrity system for windows

A statistical approach to botnet virulence estimation

Network scan detection with LQS: a lightweight, quick and stateful algorithm

Content Provider	ACM Digital Library
Author	van Oorschot, P. C. Alsaleh, Mansour
Abstract	Network scanning reveals valuable information of accessible hosts over the Internet and their offered network services, which allows significant narrowing of potential targets to attack. Addressing and balancing a set of sometimes competing desirable properties is required to make network scanning detection more appealing in practice: 1) fast detection of scanning activity to enable prompt response by intrusion detection and prevention systems; 2) acceptable rate of false alarms, keeping in mind that false alarms may lead to legitimate traffic being penalized; 3) high detection rate with the ability to detect stealthy scanners; 4) efficient use of monitoring system resources; and 5) immunity to evasion. In this paper, we present a scanning detection algorithm designed to accommodate all of these goals. LQS is a fast, accurate, and light-weight scan detection algorithm that leverages the key properties of the monitored network environment as variables that affect how the scanning detection algorithm operates. We also present what is, to our knowledge, the first automated way to estimate a reference baseline in the absence of ground truth, for use as an evaluation methodology for scan detection. Using network traces from two sites, we evaluate LQS and compare its scan detection results with those obtained by the state-of-the-art TRW algorithm. Our empirical analysis shows significant improvements over TRW in all of these properties.
Starting Page	102
Ending Page	113
Page Count	12
File Format	PDF
ISBN	9781450305648
DOI	10.1145/1966913.1966928
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2011-03-22
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Scanning detection Host discovery techniques Reconnaissance Port scanning
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in