Detail publikace

Detection of Network Buffer Overflow Attacks: A Case Study

BARABAS, M. HOMOLIAK, I. HANÁČEK, P. KAČIC, M.

Originální název

Detection of Network Buffer Overflow Attacks: A Case Study

Typ

článek ve sborníku mimo WoS a Scopus

Jazyk

angličtina

Originální abstrakt

This paper presents an automated detection method based on classification of network traffic using predefined set of network metrics. We proposed the set of metrics with focus on behavior of buffer overflow attacks and their sufficient description without the need of deep packet inspection. In this paper we describe two laboratory experiments of automated detection of buffer overflow attacks on vulnerable network services and their description by proposed set of network metrics. We present the principles of several chosen network metrics and their application on experimental attacks according to their nature in comparison to valid communication.

Klíčová slova

buffer overflow, detection, ids, network metrics

Autoři

BARABAS, M.; HOMOLIAK, I.; HANÁČEK, P.; KAČIC, M.

Rok RIV

2013

Vydáno

7. 4. 2013

Nakladatel

Institute of Electrical and Electronics Engineers

Místo

Mendellin

ISBN

978-958-8790-65-7

Kniha

The 47th Annual International Carnahan Conference on Security Technology

Strany od

128

Strany do

131

Strany počet

4

URL

https://www.fit.vut.cz/research/publication/10321/

BibTex

@inproceedings{BUT103487,
  author="Maroš {Barabas} and Ivan {Homoliak} and Petr {Hanáček} and Matej {Kačic}",
  title="Detection of Network Buffer Overflow Attacks: A Case Study",
  booktitle="The 47th Annual International Carnahan Conference on Security Technology",
  year="2013",
  pages="128--131",
  publisher="Institute of Electrical and Electronics Engineers",
  address="Mendellin",
  isbn="978-958-8790-65-7",
  url="https://www.fit.vut.cz/research/publication/10321/"
}