An efficient TCP/IP packet matching algorithm to detect stepping-stone intrusion

Yang, Jianhua; Bosworth, Edward L.

doi:10.1145/1940976.1940978

2009 Information Security Curriculum Development Conference 2009

DOI: 10.1145/1940976.1940978

|View full text |Cite

An efficient TCP/IP packet matching algorithm to detect stepping-stone intrusion

Jianhua Yang

Edward L. Bosworth

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2010

Publication Types

Select...

Other1

Relationship

Self Cite0

Independent1

Authors

Journals

Cited by 1 publication

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

Getting the Real-Time Precise Round-Trip Time for Stepping Stone Detection

Zhou

Wang

2010

2010 Fourth International Conference on Network and System Security

View full text Add to dashboard Cite

Stepping stone attacks are often used by network intruders to hide their identities. The Round Trip Times (RTT) between the send packets and corresponding echo packets for the connection chains of stepping stones are critical for detecting such attacks. In this paper, we propose a novel real-time RTT getting algorithm for stepping stones which is based on the estimation of the current RTT value. Our experiments show that it is far more precise than the previous real-time RTT getting algorithms. We also present the probability analysis which shows that our algorithm has a high matching rate and a high accurate rate.

show abstract

Getting the Real-Time Precise Round-Trip Time for Stepping Stone Detection

Zhou

Wang

2010

2010 Fourth International Conference on Network and System Security

View full text Add to dashboard Cite

show abstract

scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.

Contact Info

customersupport@researchsolutions.com

10624 S. Eastern Ave., Ste. A-614

Henderson, NV 89052, USA

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Blog Terms and Conditions API Terms Privacy Policy Contact Cookie Preferences Do Not Sell or Share My Personal Information

Made with 💙 for researchers

Part of the Research Solutions Family.

An efficient TCP/IP packet matching algorithm to detect stepping-stone intrusion

Cited by 1 publication

References 7 publications

Getting the Real-Time Precise Round-Trip Time for Stepping Stone Detection

Getting the Real-Time Precise Round-Trip Time for Stepping Stone Detection

Contact Info

Product

Resources

About