Detail výsledku

Detection of Network Buffer Overflow Attacks: A Case Study

BARABAS, M.; HOMOLIAK, I.; HANÁČEK, P.; KAČIC, M. Detection of Network Buffer Overflow Attacks: A Case Study. The 47th Annual International Carnahan Conference on Security Technology. Mendellin: Institute of Electrical and Electronics Engineers, 2013. p. 128-131. ISBN: 978-958-8790-65-7.
Typ
článek ve sborníku konference
Jazyk
anglicky
Autoři
Barabas Maroš, Ing., Ph.D., FIT (FIT), UITS (FIT)
Homoliak Ivan, doc. Ing., Ph.D., FIT (FIT), UIFS (FIT), UITS (FIT)
Hanáček Petr, doc. Dr. Ing., UITS (FIT)
Kačic Matej, Ing., Ph.D., FIT (FIT), UITS (FIT)
Abstrakt

This paper presents an automated detection method based on classification of network traffic using predefined set of network metrics. We proposed the set of metrics with focus on behavior of buffer overflow attacks and their sufficient description without the need of deep packet inspection. In this paper we describe two laboratory experiments of automated detection of buffer overflow attacks on vulnerable network services and their description by proposed set of network metrics. We present the principles of several chosen network metrics and their application on experimental attacks according to their nature in comparison to valid communication.

Klíčová slova

buffer overflow, detection, ids, network metrics

Rok
2013
Strany
128–131
Sborník
The 47th Annual International Carnahan Conference on Security Technology
Konference
47th INTERNATIONAL CARNAHAN CONFERENCE ON SECURITY TECHNOLOGY 2013
ISBN
978-958-8790-65-7
Vydavatel
Institute of Electrical and Electronics Engineers
Místo
Mendellin
BibTeX 
@inproceedings{BUT103487,
  author="Maroš {Barabas} and Ivan {Homoliak} and Petr {Hanáček} and Matej {Kačic}",
  title="Detection of Network Buffer Overflow Attacks: A Case Study",
  booktitle="The 47th Annual International Carnahan Conference on Security Technology",
  year="2013",
  pages="128--131",
  publisher="Institute of Electrical and Electronics Engineers",
  address="Mendellin",
  isbn="978-958-8790-65-7",
  url="https://www.fit.vut.cz/research/publication/10321/"
}
Soubory
Projekty
Centrum excelence IT4Innovations, MŠMT, Operační program Výzkum a vývoj pro inovace, ED1.1.00/02.0070, zahájení: 2011-01-01, ukončení: 2015-12-31, ukončen
Pokročilé bezpečné, spolehlivé a adaptivní IT, VUT, Vnitřní projekty VUT, FIT-S-11-1, zahájení: 2011-01-01, ukončení: 2013-12-31, ukončen
Výzkum informačních technologií z hlediska bezpečnosti, MŠMT, Institucionální prostředky SR ČR (např. VZ, VC), MSM0021630528, zahájení: 2007-01-01, ukončení: 2013-12-31, řešení
Výzkumné skupiny
Výzkumná skupina bezpečnosti informačních technologií (VZ Security@FIT)
Pracoviště
Ústav inteligentních systémů (UITS)
Nahoru