Modeling protocol based packet header anomaly detector for network and host intrusion detection systems

被引：0
|
作者：
Shamsuddin, Solahuddin B. [1 ]
Woodward, Michael E. [1 ]
机构：
[1] Univ Bradford, Dept Comp, Sch Informat, Bradford BD7 1DP, W Yorkshire, England
来源：
CRYPTOLOGY AND NETWORK SECURITY | 2007年 / 4856卷
关键词：
anomaly; data base; network intrusion detection system;
D O I：
暂无
中图分类号：
TP31 [计算机软件];
学科分类号：
081202 ; 0835 ;
摘要：
This paper describes an experimental protocol based packet header anomaly detector for Network and Host Intrusion Detection System modelling which analyses the behaviour of packet header field values based on its layer 2, 3 and 4 protocol fields of the ISO OSI Seven Layer Model for Networking. Our model which we call as Protocol based Packet Header Anomaly Detector (PbPHAD) Intrusion Detection System is designed to detect the anomalous behaviour of network traffic packets based on three specific network and transport layer protocols namely UDP, TCP and ICMP to identify the degree of maliciousness from a set of detected anomalous packets identified from the sum of statistically modelled individually rated anomalous field values.
引用
收藏
页码：209 / 227
页数：19
相关论文
共 50 条
  • [1] Stochastic protocol modeling for anomaly based network intrusion detection
    Estevez-Tapiador, JM
    Garcia-Teodoro, P
    Diaz-Verdejo, JE
    IWIA 2003: FIRST IEEE INTERNATIONAL WORKSHOP ON INFORMATION ASSURANCE, PROCEEDINGS, 2003, : 3 - 12
  • [2] PHAD: Packet Header Anomaly Detection
    Garg, Akash
    Maheshwari, Prachi
    PROCEEDINGS OF THE 10TH INTERNATIONAL CONFERENCE ON INTELLIGENT SYSTEMS AND CONTROL (ISCO'16), 2016,
  • [3] Packet header parsing method in high speed network intrusion detection system
    Xiao, Y. (xydarcher@uestc.edu.cn), 1600, Science Press (33):
  • [4] Performance Analysis of Anomaly Based Network Intrusion Detection Systems
    Abedin, Md. Zainal
    Siddiquee, Kazy Noor-e-Alam
    Bhuyan, M. S.
    Karim, Razuan
    Hossain, Mohammad Shahadat
    Andersson, Karl
    PROCEEDINGS OF THE 2018 43RD ANNUAL IEEE CONFERENCE ON LOCAL COMPUTER NETWORKS WORKSHOPS (LCN WORKSHOPS), 2018, : 1 - 7
  • [5] A clustering-based anomaly intrusion detector for a host computer
    Oh, SH
    Lee, WS
    IEICE TRANSACTIONS ON INFORMATION AND SYSTEMS, 2004, E87D (08): : 2086 - 2094
  • [6] Packet Header Anomaly Detection Using Statistical Analysis
    Yassin, Warusia
    Udzir, Nur Izura
    Abdullah, Azizol
    Abdullah, Mohd Taufik
    Muda, Zaiton
    Zulzalil, Hazura
    INTERNATIONAL JOINT CONFERENCE SOCO'14-CISIS'14-ICEUTE'14, 2014, 299 : 473 - 482
  • [7] Anomaly-based network intrusion detection: Techniques, systems and challenges
    Garcia-Teodoro, P.
    Diaz-Verdejo, J.
    Macia-Fernandez, G.
    Vazquez, E.
    COMPUTERS & SECURITY, 2009, 28 (1-2) : 18 - 28
  • [8] On the importance of header classification in HW/SW network intrusion detection systems
    Dimopoulos, V
    Papadopoulos, G
    Pnevmatikatos, D
    ADVANCES IN INFORMATICS, PROCEEDINGS, 2005, 3746 : 661 - 671
  • [9] A Survey on Anomaly Based Host Intrusion Detection System
    Jose, Shijoe
    Malathi, D.
    Reddy, Bharath
    Jayaseeli, Dorathi
    PROCEEDINGS OF THE 10TH NATIONAL CONFERENCE ON MATHEMATICAL TECHNIQUES AND ITS APPLICATIONS (NCMTA 18), 2018, 1000
  • [10] Protocol based foresight anomaly intrusion detection system
    Tsai, MK
    Lin, SC
    Tseng, SS
    37TH ANNUAL 2003 INTERNATIONAL CARNAHAN CONFERENCE ON SECURITY TECHNOLOGY, PROCEEDINGS, 2003, : 493 - 500
12345