Detecting IP-spoofing by modelling history of IP address entry points
The result's identifiers
Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216305%3A26230%2F13%3APU106325" target="_blank" >RIV/00216305:26230/13:PU106325 - isvavai.cz</a>
Alternative codes found
RIV/63839172:_____/13:10130200
Result on the web
<a href="http://www.fit.vutbr.cz/research/pubs/all.php?id=10271" target="_blank" >http://www.fit.vutbr.cz/research/pubs/all.php?id=10271</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1007/978-3-642-38998-6_9" target="_blank" >10.1007/978-3-642-38998-6_9</a>
Alternative languages
Result language
angličtina
Original language name
Detecting IP-spoofing by modelling history of IP address entry points
Original language description
Since most of the networks do not apply source IP filtering rules to its outgoing traffic an attacker may insert an arbitrary source IP address in an outgoing packet, so called IP-spoofing. This paper elaborates on a possibility to detect IP spoofing in networks with more than one entry point. A novel detection scheme is proposed. It is based on an analysis of NetFlow data collected at the entry points.The scheme assumes that the network traffic originating from a certain source network enters the observed network via relatively stable set of points which is lower than the total number of entry points. The scheme has been tested on data from a real network.
Czech name
—
Czech description
—
Classification
Type
D - Article in proceedings
CEP classification
—
OECD FORD branch
10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)
Result continuities
Project
Result was created during the realization of more than one project. More information in the Projects tab.
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)<br>Z - Vyzkumny zamer (s odkazem do CEZ)<br>S - Specificky vyzkum na vysokych skolach
Others
Publication year
2013
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů
Data specific for result type
Article name in the collection
Emerging Management Mechanisms for the Future Internet
ISBN
978-3-642-38997-9
ISSN
0302-9743
e-ISSN
—
Number of pages
11
Pages from-to
73-83
Publisher name
Springer Verlag
Place of publication
Barcelona
Event location
UPC Barcelona, Spain
Event date
Jun 25, 2013
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
—