| Publisher | Applied Computer Security Associates (ACSA) | ||
|---|---|---|---|
| Format | 163.3KB PDF | Date added | 15 Sep 2005 |
| Topics | TCP - IP, Network Security | ||
| Downloads | 42 | ||
This paper proposes Std-ratio approach to detect stepping-stone intrusion, as well as Std-clustering method to find TCP packet round trip time of a connection chain. Std-ratio is a method to use the ratio between the standard deviation of the round trip time gaps to the downstream neighbor host and to the end side of a connection chain. Std-clustering is a method to determine the round trip time cluster by comparing the standard deviation of each candidate cluster. Comparing with previous approaches, Std-ratio has the advantages: it can be applied to encrypted sessions; it is not necessary to monitor a connection chain all the while; it has low false negative and positive error; it can overcome the unit bar problem.
Did you find this white paper useful?
21 out of 50 users found this white paper useful
Related white papers
Building Reliable IP Telephony Systems
Reliability is the most critical aspect of a business phone system. IP telephony systems will deliver differing service levels because their architecture is fundamentally different. Ironically, optimal architecture and design...
Cash In Your PBX -- Upgrade with Cisco. Gain significant new savings now
PBX systems and old telephony applications were just not built for today's business needs. They don't scale easily, struggle to support mobility, and are increasingly expensive to maintain. Now you...
IOS Tips and Tricks
There are a number of things you can do with Cisco's IOS to make your life easier. This white paper presents some ways that IOS commands can help streamline your...
Dell-Customized Mobility Solutions
The marketplace is overflowing with a multitude of mobility options for businesses of all types and sizes. From notebooks, netbooks, and handheld computers to WiFi, smartphones, and mobile broadband, there...
Interactive Guide: Enterprise Mobility
Getting Started With Enterprise Mobility: A Guide to Sybase's Enterprise Mobility Platform. With the broadest portfolio of industry-leading products, an innovative mobility platform that provides a foundation for future growth,...
Webcast & Video: Special Report on MEAP featuring research from Gartner
Complimentary Webcast: Taking a Strategic Approach to Enterprise Mobility. Whether you're just getting started with mobility or have already rolled out multiple applications, taking a strategic approach to mobility is...
BCube: A High Performance, Server-Centric Network Architecture for Modular Data Centers
This paper presents BCube, a new network architecture specifically designed for shipping-container based, modular data centers. At the core of the BCube architecture is its server-centric network structure, where servers...
