Clusters in the Expanse: Understanding and Unbiasing IPv6 Hitlists

Autor: Gasser, Oliver, Scheitle, Quirin, Foremski, Pawel, Lone, Qasim, Korczynski, Maciej, Strowes, Stephen D., Hendriks, Luuk, Carle, Georg

Publikováno v: Proceedings of the 2018 Internet Measurement Conference (IMC '18)

Network measurements are an important tool in understanding the Internet. Due to the expanse of the IPv6 address space, exhaustive scans as in IPv4 are not possible for IPv6. In recent years, several studies have proposed the use of target lists of I

Externí odkaz: http://arxiv.org/abs/1806.01633

Flow-based detection of IPv6-specific network layer attacks

Autor: Hendriks, Luuk, Velan, Petr, de O. Schmidt, Ricardo, de Boer, Pieter-Tjerk, Pras, Aiko, Tuncer, Daphne, Koch, Robert, Badonne, Rémi, Stiller, Burkhard

Publikováno v: Lecture Notes in Computer Science
11th IFIP International Conference on Autonomous Infrastructure, Management and Security (AIMS)
11th IFIP International Conference on Autonomous Infrastructure, Management and Security (AIMS), Jul 2017, Zurich, Switzerland. pp.137-142, ⟨10.1007/978-3-319-60774-0_11⟩
Lecture Notes in Computer Science ISBN: 9783319607733
AIMS
Security of Networks and Services in an All-Connected World: 11th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2017, Proceedings, 137-142
STARTPAGE=137;ENDPAGE=142;TITLE=Security of Networks and Services in an All-Connected World
AIMS 2017-11th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security

Part 4: Short Papers: Security, Intrusion Detection, and Configuration; International audience; With a vastly different header format, IPv6 introduces new vulnerabilities not possible in IPv4, potentially requiring new detection algorithms. While man

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::5e7760ac6b82b8e5727453d5516b6b76
https://doi.org/10.1007/978-3-319-60774-0_11

Assessing the quality of flow measurements from OpenFlow devices

Autor: Hendriks, Luuk, de Oliveira Schmidt, R., Sadre, R., Bezerra, Jeronimo, Pras, Aiko

Publikováno v: STARTPAGE=1;ENDPAGE=8;TITLE=None

Since its initial proposal in 2008, OpenFlow has evolved to become today’s main enabler of Software-Defined Networking. OpenFlow specifies operations for network forwarding devices and a communication protocol between data and control planes. Altho

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=narcis______::3c1515ed1e9a6576c076ff94f3ad7274
https://research.utwente.nl/en/publications/e5a32c43-4859-43ae-b509-d1f4d093e889

SSH Compromise Detection Using NetFlow/IPFIX

Autor: Hofstede, R.J., Hendriks, Luuk

Publikováno v: FloCon 2015

Dictionary attacks against SSH daemons are a common type of brute-force attack, in which attackers perform authentication attempts on a remote machine. By now, we are used to observing a steady number of SSH dictionary attacks in our networks every d

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=narcis______::72b28c9b0abee3a4dbfab86595f598d7
https://research.utwente.nl/en/publications/ssh-compromise-detection-using-netflowipfix(0fe34e24-d853-4883-971f-6197ec5096aa).html

SSHCure: SSH Intrusion Detection using NetFlow and IPFIX

Autor: Hendriks, Luuk, Hofstede, R.J., Sperotto, Anna, Pras, Aiko

Publikováno v: TERENA Networking Conference 2014

With this poster, we present our SSH Intrusion Detection System named SSHCure: it is the first IDS capable of distinguishing successful attacks from unsuccessful attacks, thus detecting actual compromises. As powerful as SSH is to administrators, as

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=narcis______::4af38f7dcbcad5f36496fe35cea65b1e
https://research.utwente.nl/en/publications/sshcure-ssh-intrusion-detection-using-netflow-and-ipfix(561a6d67-b782-4687-b30d-adc6cc9418a0).html