About: Using of time characteristic in Netflow data for improvement of protocol detection

Facets (new session)
Description
Metadata
Settings
- owl:sameAs
- Inference Rule:

About: Using of time characteristic in Netflow data for improvement of protocol detection Goto Sponge NotDistinct Permalink

An Entity of Type : http://linked.opendata.cz/ontology/domain/vavai/Vysledek, within Data Space : linked.opendata.cz associated with source document(s)

Attributes	Values
rdf:type	skos:Concept http://linked.opendata.cz/ontology/domain/vavai/Vysledek
rdfs:seeAlso	http://www.ietf.org/proceedings/78/slides/NMRG-6.pdf
Description	Protocol detection is very important for network security applications. This information can be gathered from NetFlow data with method based on port numbers, but port numbers can be changed easily. This work brings an idea how to detect protocols using additional information about gaps between packets, which is different for each protocol. This property allows us to detect one specific situation - dictionary attack on SSH - so far. Protocol detection is very important for network security applications. This information can be gathered from NetFlow data with method based on port numbers, but port numbers can be changed easily. This work brings an idea how to detect protocols using additional information about gaps between packets, which is different for each protocol. This property allows us to detect one specific situation - dictionary attack on SSH - so far. (en)
Title	Using of time characteristic in Netflow data for improvement of protocol detection Using of time characteristic in Netflow data for improvement of protocol detection (en)
skos:prefLabel	Using of time characteristic in Netflow data for improvement of protocol detection Using of time characteristic in Netflow data for improvement of protocol detection (en)
skos:notation	RIV/00216224:14610/10:00040922!RIV11-MO0-14610___
http://linked.open...avai/riv/aktivita	P
http://linked.open...avai/riv/aktivity	P(OVMASUN200801)
http://linked.open...vai/riv/dodaniDat	2011
http://linked.open...aciTvurceVysledku	Piskač, Pavel Novotný, Jiří
http://linked.open.../riv/druhVysledku	A(V) - Audiovizuální tvorba se vzdáleným přístupem
http://linked.open...iv/duvernostUdaju	S - Úplné a pravdivé údaje nepodléhající ochraně podle zvláštních právních předpisů
http://linked.open...titaPredkladatele	Masarykova univerzita / Ústav výpočetní techniky
http://linked.open...dnocenehoVysledku	294805
http://linked.open...ai/riv/idVysledku	RIV/00216224:14610/10:00040922
http://linked.open...riv/jazykVysledku	eng - angličtina
http://linked.open.../riv/klicovaSlova	NetFlow; time characteristic; SSH; dictionary attack (en)
http://linked.open.../riv/klicoveSlovo	NetFlow SSH time characteristic dictionary attack
http://linked.open...i/riv/kodPristupu	V
http://linked.open...ontrolniKodProRIV	[6491721E4C7A]
http://linked.open...in/vavai/riv/obor	IN
http://linked.open...ichTvurcuVysledku	2 (xsd:int)
http://linked.open...cetTvurcuVysledku	2 (xsd:int)
http://linked.open...vavai/riv/projekt	Security of Czech army information and communication systems - On-line monitoring, Visualization and Packet Filtration. Computer Incident Response Capability Development in the Cyber Defence Environment.
http://linked.open...UplatneniVysledku	2010
http://linked.open...iv/tvurceVysledku	Novotný, Jiří Piskač, Pavel
http://localhost/t...ganizacniJednotka	14610

Faceted Search & Find service v1.16.118 as of Jun 21 2024

Alternative Linked Data Documents: ODE Content Formats:

RDF

ODATA

Microdata

About

OpenLink Virtuoso version 07.20.3240 as of Jun 21 2024, on Linux (x86_64-pc-linux-gnu), Single-Server Edition (126 GB total memory, 11 GB memory in use)
Data on this page belongs to its respective rights holders.
Virtuoso Faceted Browser Copyright © 2009-2024 OpenLink Software