A Flow-Level Taxonomy and Prevalence of Brute Force Attacks

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14610%2F11%3A00050706" target="_blank" >RIV/00216224:14610/11:00050706 - isvavai.cz</a>
Result on the web
<a href="http://dx.doi.org/10.1007/978-3-642-22714-1_69" target="_blank" >http://dx.doi.org/10.1007/978-3-642-22714-1_69</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1007/978-3-642-22714-1_69" target="_blank" >10.1007/978-3-642-22714-1_69</a>

Result language
angličtina
Original language name
A Flow-Level Taxonomy and Prevalence of Brute Force Attacks
Original language description
Online brute force and dictionary attacks against network services and web applications are ubiquitous. We present their taxonomy from the perspective of network flows. This contributes to clear evaluation of detection methods and provides better understanding of the brute force attacks within the research community. Next, we utilize the formal definitions of attacks in a long-term analysis of SSH traffic from 10 gigabit university network. The results shows that flow-based intrusion detection may profit from traffic observation of the whole network, particularly it can allow more accurate detection of the majority of brute-force attacks in high-speed networks.
Czech name
—
Czech description
—

Project
<a href="/en/project/OVMASUN200801" target="_blank" >OVMASUN200801: Security of Czech army information and communication systems - On-line monitoring, Visualization and Packet Filtration. Computer Incident Response Capability Development in the Cyber Defence Environment.</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year
2011
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Similar results(10)