Aspect-based Attack Detection in Large-scale Networks

• Authors: DRAŠAR Martin; VYKOPAL Jan; KREJČÍ Radek; ČELEDA Pavel
• Year of publication: 2010
• Type: Article in Proceedings
• Conference: Recent Advances in Intrusion Detection
• MU Faculty or unit: Institute of Computer Science
• Web: http://www.springerlink.com/content/d11326482k386j5r/
• Field: Informatics
• Keywords: intrusion detection;aspect;network;large-scale;convolution;parallel
• Description: In this paper, a novel behavioral method for detection of attacks on a network is presented. The main idea is to decompose a traffic into smaller subsets that are analyzed separately using various mechanisms. After analyses are performed, results are correlated and attacks are detected. Both the decomposition and chosen analytical mechanisms make this method highly parallelizable. The correlation mechanism allows to take into account results of detection methods beside the aspect-based detection.

Related projects

• CYBER - Security of Czech Army Information and Communication Systems - On-line Monitoring, Visualization and Packet Filtration. Computer Incident Response Capability Development in the Cyber Defence Environment