| Paper: | SPTM-P13.10 | ||
| Session: | Detection, Estimation, Classification Theory and Applications | ||
| Time: | Friday, May 19, 14:00 - 16:00 | ||
| Presentation: | Poster | ||
| Topic: | Signal Processing Theory and Methods: Detection, Estimation, Classification Theory and Applications | ||
| Title: | Detecting Encrypted Interactive Stepping-stone Connections | ||
| Authors: | Ting He, Lang Tong, Cornell University, United States | ||
| Abstract: | Network intruders often hide their identities by sending attacks through a chain of compromised hosts that are used as ``stepping stones''. The difficulty in defending against such attacks lies in detecting stepping-stone connections at the compromised hosts. In this paper, to distinguish normal from attacking connections, we consider strategies that do not depend on the content of the traffic so that they are applicable to encrypted traffic. We propose a low complexity detection algorithm that has no miss detection and an exponentially decaying false alarm probability. A sequential strategy is then developed to reduce the required number of testing packets. | ||
©2018 Conference Management Services, Inc. -||- email: webmaster@icassp2006.org -||- Last updated Friday, August 17, 2012