About: Bruteforcing in the Shadows - Evading Automated Detection

Facets (new session)
Description
Metadata
Settings
- owl:sameAs
- Inference Rule:

About: Bruteforcing in the Shadows - Evading Automated Detection Goto Sponge NotDistinct Permalink

An Entity of Type : http://linked.opendata.cz/ontology/domain/vavai/Vysledek, within Data Space : linked.opendata.cz associated with source document(s)

Attributes	Values
rdf:type	skos:Concept http://linked.opendata.cz/ontology/domain/vavai/Vysledek
rdfs:seeAlso	http://www.cert.org/flocon/2012/presentations/drasar-vykopal-bruteforcing-in-the-shadows.pdf
Description	Networks of today face multitude of attacks of various complexities, but research of suitable defences is often done on limited or unsuitable datasets or insufficient testbeds. Therefore many proposed detection mechanisms are usable only for relatively small subsets of attacks, which significantly disturbs traffic patterns such as flooding attacks or massive port scans. At Masaryk University, which has about 15,000 networked computers, we employ a wide range of detection tools based on NetFlow, such as port scan, botnet, and brute-force attack detectors. Their initial versions proved to be useful for detecting attacks that generate significant behavioral changes in traffic patterns. However we have found that there are several techniques to lessen the behavioral impact and in effect to hide an attack from the detection mechanisms. In our presentation we will discuss three such techniques. The first one restricts the number of attempts in a given time window under the detection threshold. Networks of today face multitude of attacks of various complexities, but research of suitable defences is often done on limited or unsuitable datasets or insufficient testbeds. Therefore many proposed detection mechanisms are usable only for relatively small subsets of attacks, which significantly disturbs traffic patterns such as flooding attacks or massive port scans. At Masaryk University, which has about 15,000 networked computers, we employ a wide range of detection tools based on NetFlow, such as port scan, botnet, and brute-force attack detectors. Their initial versions proved to be useful for detecting attacks that generate significant behavioral changes in traffic patterns. However we have found that there are several techniques to lessen the behavioral impact and in effect to hide an attack from the detection mechanisms. In our presentation we will discuss three such techniques. The first one restricts the number of attempts in a given time window under the detection threshold. (en)
Title	Bruteforcing in the Shadows - Evading Automated Detection Bruteforcing in the Shadows - Evading Automated Detection (en)
skos:prefLabel	Bruteforcing in the Shadows - Evading Automated Detection Bruteforcing in the Shadows - Evading Automated Detection (en)
skos:notation	RIV/00216224:14610/12:00058679!RIV13-MO0-14610___
http://linked.open...avai/riv/aktivita	P S
http://linked.open...avai/riv/aktivity	P(OVMASUN200801), S
http://linked.open...vai/riv/dodaniDat	2013
http://linked.open...aciTvurceVysledku	Vykopal, Jan Drašar, Martin
http://linked.open.../riv/druhVysledku	A(V) - Audiovizuální tvorba se vzdáleným přístupem
http://linked.open...iv/duvernostUdaju	S - Úplné a pravdivé údaje nepodléhající ochraně podle zvláštních právních předpisů
http://linked.open...titaPredkladatele	Masarykova univerzita / Ústav výpočetní techniky
http://linked.open...dnocenehoVysledku	125591
http://linked.open...ai/riv/idVysledku	RIV/00216224:14610/12:00058679
http://linked.open...riv/jazykVysledku	eng - angličtina
http://linked.open.../riv/klicovaSlova	NetFlow; bruteforce attacks; flow stretching; evading detection; automatic detection (en)
http://linked.open.../riv/klicoveSlovo	NetFlow automatic detection bruteforce attacks evading detection flow stretching
http://linked.open...i/riv/kodPristupu	V
http://linked.open...ontrolniKodProRIV	[14C673FBCDA4]
http://linked.open...in/vavai/riv/obor	IN
http://linked.open...ichTvurcuVysledku	2 (xsd:int)
http://linked.open...cetTvurcuVysledku	2 (xsd:int)
http://linked.open...vavai/riv/projekt	Security of Czech army information and communication systems - On-line monitoring, Visualization and Packet Filtration. Computer Incident Response Capability Development in the Cyber Defence Environment.
http://linked.open...UplatneniVysledku	2012
http://linked.open...iv/tvurceVysledku	Vykopal, Jan Drašar, Martin
http://localhost/t...ganizacniJednotka	14610

Faceted Search & Find service v1.16.118 as of Jun 21 2024

Alternative Linked Data Documents: ODE Content Formats:

RDF

ODATA

Microdata

About

OpenLink Virtuoso version 07.20.3240 as of Jun 21 2024, on Linux (x86_64-pc-linux-gnu), Single-Server Edition (126 GB total memory, 58 GB memory in use)
Data on this page belongs to its respective rights holders.
Virtuoso Faceted Browser Copyright © 2009-2024 OpenLink Software