NDLI: Analysis and prevention of network password guessing attacks in an enterprise environment

Content Provider	IEEE Xplore Digital Library
Author	Manolache, F.B. Qingping Hou Rusu, O.
Copyright Year	2014
Description	Author affiliation: Digital Commun. Dept., Alexandru Ioan Cuza Univ., Iasi, Romania (Rusu, O.) \|\| Carnegie Mellon Univ., Pittsburgh, PA, USA (Manolache, F.B.; Qingping Hou)
Abstract	Common tools are available to protect individual computers against malicious password guessing attacks affecting services like ssh or imap. This paper takes such tools to the next level by proposing network-wide defense strategies and by presenting an implementation of a system that creates a collective defense. Such a system is useful in enterprise environments where frequent ssh scans waste bandwidth and some aggressive imap scans can induce denial of service to mail servers. The defense system is based on a set of computers that maintain a common database about the individual attacks. By interpreting the events stored in the database, every computer on the network can preemptively block attackers. The main objectives of the design of this system are to avoid creating a single point of failure by using a distributed database, and to handle the entire configuration of the participants from one single file. A variety of attack scenarios are studied to improve the efficiency of the defense.
Starting Page	1
Ending Page	7
File Size	246291
Page Count	7
File Format	PDF
ISBN	9781479968602
ISSN	20681038
e-ISBN	9781479968619
DOI	10.1109/RoEduNet-RENAM.2014.6955303
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2014-09-11
Publisher Place	Moldova
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Computers Dictionaries Databases Ddos Ports (Computers) Password guessing Ssh scan IP networks Servers Niobium Fail2ban
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Defenses to curb online password guessing attacks

Characterization and analysis of NTP amplification based DDoS attacks

Distributed Denial of service attacks and its effects on Cloud environment- a survey

Common network attack types and defense mechanisms

A SDN-oriented DDoS blocking scheme for botnet-based attacks

Detection of DDoS Backscatter Based on Traffic Features of Darknet TCP Packets

SSH Dictionary Attack and DNS Reverse Resolution Traffic in Campus Network

Revisiting Defenses against Large-Scale Online Password Guessing Attacks

Securing Cloud Servers Against Flooding Based DDOS Attacks

Analysis and prevention of network password guessing attacks in an enterprise environment

Similar Documents

Defenses to curb online password guessing attacks

Characterization and analysis of NTP amplification based DDoS attacks

Distributed Denial of service attacks and its effects on Cloud environment- a survey

Common network attack types and defense mechanisms

A SDN-oriented DDoS blocking scheme for botnet-based attacks

Detection of DDoS Backscatter Based on Traffic Features of Darknet TCP Packets

SSH Dictionary Attack and DNS Reverse Resolution Traffic in Campus Network

Revisiting Defenses against Large-Scale Online Password Guessing Attacks

Securing Cloud Servers Against Flooding Based DDOS Attacks

Analysis and prevention of network password guessing attacks in an enterprise environment