Detail publikačního výsledku

Detection of Network Buffer Overflow Attacks: A Case Study

BARABAS, M.; HOMOLIAK, I.; HANÁČEK, P.; KAČIC, M.

Originální název

Detection of Network Buffer Overflow Attacks: A Case Study

Anglický název

Detection of Network Buffer Overflow Attacks: A Case Study

Druh

Stať ve sborníku mimo WoS a Scopus

Originální abstrakt

This paper presents an automated detection method based on classification of network traffic using predefined set of network metrics. We proposed the set of metrics with focus on behavior of buffer overflow attacks and their sufficient description without the need of deep packet inspection. In this paper we describe two laboratory experiments of automated detection of buffer overflow attacks on vulnerable network services and their description by proposed set of network metrics. We present the principles of several chosen network metrics and their application on experimental attacks according to their nature in comparison to valid communication.

Anglický abstrakt

This paper presents an automated detection method based on classification of network traffic using predefined set of network metrics. We proposed the set of metrics with focus on behavior of buffer overflow attacks and their sufficient description without the need of deep packet inspection. In this paper we describe two laboratory experiments of automated detection of buffer overflow attacks on vulnerable network services and their description by proposed set of network metrics. We present the principles of several chosen network metrics and their application on experimental attacks according to their nature in comparison to valid communication.

Klíčová slova

buffer overflow, detection, ids, network metrics

Klíčová slova v angličtině

buffer overflow, detection, ids, network metrics

Autoři

BARABAS, M.; HOMOLIAK, I.; HANÁČEK, P.; KAČIC, M.

Rok RIV

2014

Vydáno

07.04.2013

Nakladatel

Institute of Electrical and Electronics Engineers

Místo

Mendellin

ISBN

978-958-8790-65-7

Kniha

The 47th Annual International Carnahan Conference on Security Technology

Strany od

128

Strany do

131

Strany počet

4

URL

Plný text v Digitální knihovně

BibTex

@inproceedings{BUT103487,
  author="Maroš {Barabas} and Ivan {Homoliak} and Petr {Hanáček} and Matej {Kačic}",
  title="Detection of Network Buffer Overflow Attacks: A Case Study",
  booktitle="The 47th Annual International Carnahan Conference on Security Technology",
  year="2013",
  pages="128--131",
  publisher="Institute of Electrical and Electronics Engineers",
  address="Mendellin",
  isbn="978-958-8790-65-7",
  url="https://www.fit.vut.cz/research/publication/10321/"
}

Dokumenty