Detection and identification of neptune attacks and flash crowds

Quyen Le The; Marat Zhanikeev; Yoshiaki Tanaka

Detection and identification of neptune attacks and flash crowds

Quyen Le The^*, Marat Zhanikeev, Yoshiaki Tanaka

^*Corresponding author for this work

School of Fundamental Science and Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Neptune attack and Flash Crowd are two typical threats to web servers. These two anomalies have many identical features that make them difficult to distinguish. In this paper, we propose a statistical packet-based method to detect Neptune attacks and Flash Crowds and more importantly, by performing separate analysis by source address aggregation, we also propose additional efficient means to differentiate these two similar anomalies.

Original language	English
Title of host publication	Managing Next Generation Networks and Services - 10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007, Proceedings
Pages	571-574
Number of pages	4
Publication status	Published - 2007 Dec 1
Event	10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007 - Sapporo, Japan Duration: 2007 Oct 10 → 2007 Oct 12

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	4773 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007
Country/Territory	Japan
City	Sapporo
Period	07/10/10 → 07/10/12

ASJC Scopus subject areas

Theoretical Computer Science
Computer Science(all)

Cite this

The, Q. L., Zhanikeev, M., & Tanaka, Y. (2007). Detection and identification of neptune attacks and flash crowds. In Managing Next Generation Networks and Services - 10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007, Proceedings (pp. 571-574). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 4773 LNCS).

Detection and identification of neptune attacks and flash crowds. / The, Quyen Le; Zhanikeev, Marat; Tanaka, Yoshiaki.
Managing Next Generation Networks and Services - 10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007, Proceedings. 2007. p. 571-574 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 4773 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

The, QL, Zhanikeev, M & Tanaka, Y 2007, Detection and identification of neptune attacks and flash crowds. in Managing Next Generation Networks and Services - 10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 4773 LNCS, pp. 571-574, 10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007, Sapporo, Japan, 07/10/10.

The QL, Zhanikeev M, Tanaka Y. Detection and identification of neptune attacks and flash crowds. In Managing Next Generation Networks and Services - 10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007, Proceedings. 2007. p. 571-574. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

The, Quyen Le ; Zhanikeev, Marat ; Tanaka, Yoshiaki. / Detection and identification of neptune attacks and flash crowds. Managing Next Generation Networks and Services - 10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007, Proceedings. 2007. pp. 571-574 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{ce648ce4602e43518efc4efb1c73b823,

title = "Detection and identification of neptune attacks and flash crowds",

abstract = "Neptune attack and Flash Crowd are two typical threats to web servers. These two anomalies have many identical features that make them difficult to distinguish. In this paper, we propose a statistical packet-based method to detect Neptune attacks and Flash Crowds and more importantly, by performing separate analysis by source address aggregation, we also propose additional efficient means to differentiate these two similar anomalies.",

author = "The, {Quyen Le} and Marat Zhanikeev and Yoshiaki Tanaka",

year = "2007",

month = dec,

day = "1",

language = "English",

isbn = "9783540754756",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

pages = "571--574",

booktitle = "Managing Next Generation Networks and Services - 10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007, Proceedings",

note = "10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007 ; Conference date: 10-10-2007 Through 12-10-2007",

}

TY - GEN

T1 - Detection and identification of neptune attacks and flash crowds

AU - The, Quyen Le

AU - Zhanikeev, Marat

AU - Tanaka, Yoshiaki

PY - 2007/12/1

Y1 - 2007/12/1

N2 - Neptune attack and Flash Crowd are two typical threats to web servers. These two anomalies have many identical features that make them difficult to distinguish. In this paper, we propose a statistical packet-based method to detect Neptune attacks and Flash Crowds and more importantly, by performing separate analysis by source address aggregation, we also propose additional efficient means to differentiate these two similar anomalies.

AB - Neptune attack and Flash Crowd are two typical threats to web servers. These two anomalies have many identical features that make them difficult to distinguish. In this paper, we propose a statistical packet-based method to detect Neptune attacks and Flash Crowds and more importantly, by performing separate analysis by source address aggregation, we also propose additional efficient means to differentiate these two similar anomalies.

UR - http://www.scopus.com/inward/record.url?scp=38149023388&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=38149023388&partnerID=8YFLogxK

M3 - Conference contribution

AN - SCOPUS:38149023388

SN - 9783540754756

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 571

EP - 574

BT - Managing Next Generation Networks and Services - 10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007, Proceedings

T2 - 10th Asia-Pacific Network Operations and Management Symposium, APNOMS 2007

Y2 - 10 October 2007 through 12 October 2007

ER -

Detection and identification of neptune attacks and flash crowds

Abstract

Publication series

Conference

ASJC Scopus subject areas

Other files and links

Fingerprint

Cite this