Deep Packet Inspection Using Message Passing Networks

Jain, Divya; Lakshmi, K. Vasanta; Shankar, Priti

doi:10.1007/978-3-540-87403-4_35

Search citation statements

Order By: Relevance

Paper Sections

Select...

Attack Detection1

Citation Types

Supporting

Mentioning

Contrasting

Publication Types

Select...

Other1

Relationship

Self Cite0

Independent1

Authors

Journals

Cited by 1 publication

(1 citation statement)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Technologies like deep packet inspection [10,12,22] and detection of embedded shell code [8,23] can help, but given the intimate interaction of the data with the host system, it is very difficult to predict behavior in situ reliably [15,27]. Nevertheless, our networks are architected around this "attack detection" paradigm, where we base our defenses on the fallacy that we can reliably sort good from bad at the border of our system or our site.…”

Section: Attack Detectionmentioning

confidence: 99%

Results-oriented security

Bishop

Ford

Ramilli

2011

2011 6th International Conference on Malicious and Unwanted Software

View full text Add to dashboard Cite

Current security practice is to examine incoming messages, commands, data, and executing processes for attacks that can then be countered. This position paper argues that this practice is counterproductive because the number and variety of attacks are far greater than we can cope with. We propose a results-oriented approach, in which one focuses on the step of the attack that realizes the compromise. Thus, the manner in which the compromise is effected becomes less important than the actual result, and prevention, detection, and recovery efforts are focused on that.

show abstract