Result Details

Detection of Network Buffer Overflow Attacks: A Case Study

BARABAS, M.; HOMOLIAK, I.; HANÁČEK, P.; KAČIC, M. Detection of Network Buffer Overflow Attacks: A Case Study. The 47th Annual International Carnahan Conference on Security Technology. Mendellin: Institute of Electrical and Electronics Engineers, 2013. p. 128-131. ISBN: 978-958-8790-65-7.
Type
conference paper
Language
English
Authors
Barabas Maroš, Ing., Ph.D., DITS (FIT)
Homoliak Ivan, doc. Ing., Ph.D., DIFS (FIT), DITS (FIT)
Hanáček Petr, doc. Dr. Ing., DITS (FIT)
Kačic Matej, Ing., Ph.D., DITS (FIT)
Abstract

This paper presents an automated detection method based on classification of network traffic using predefined set of network metrics. We proposed the set of metrics with focus on behavior of buffer overflow attacks and their sufficient description without the need of deep packet inspection. In this paper we describe two laboratory experiments of automated detection of buffer overflow attacks on vulnerable network services and their description by proposed set of network metrics. We present the principles of several chosen network metrics and their application on experimental attacks according to their nature in comparison to valid communication.

Keywords

buffer overflow, detection, ids, network metrics

Published
2013
Pages
128–131
Proceedings
The 47th Annual International Carnahan Conference on Security Technology
Conference
47th INTERNATIONAL CARNAHAN CONFERENCE ON SECURITY TECHNOLOGY 2013
ISBN
978-958-8790-65-7
Publisher
Institute of Electrical and Electronics Engineers
Place
Mendellin
BibTeX 
@inproceedings{BUT103487,
  author="Maroš {Barabas} and Ivan {Homoliak} and Petr {Hanáček} and Matej {Kačic}",
  title="Detection of Network Buffer Overflow Attacks: A Case Study",
  booktitle="The 47th Annual International Carnahan Conference on Security Technology",
  year="2013",
  pages="128--131",
  publisher="Institute of Electrical and Electronics Engineers",
  address="Mendellin",
  isbn="978-958-8790-65-7",
  url="https://www.fit.vut.cz/research/publication/10321/"
}
Files
Projects
Advanced secured, reliable and adaptive IT, BUT, Vnitřní projekty VUT, FIT-S-11-1, start: 2011-01-01, end: 2013-12-31, completed
Centrum excelence IT4Innovations, MŠMT, Operační program Výzkum a vývoj pro inovace, ED1.1.00/02.0070, start: 2011-01-01, end: 2015-12-31, completed
Security-Oriented Research in Information Technology, MŠMT, Institucionální prostředky SR ČR (např. VZ, VC), MSM0021630528, start: 2007-01-01, end: 2013-12-31, running
Research groups
IT Security Research Group (RG Security@FIT)
Departments
Department of Intelligent Systems (DITS)
Back to top