Autor/Autorin: Linehan Eamonn
Dr. Éamonn Linehan is a research fellow in the Distributed nSystems Group at Trinity College Dublin. His current research ninterests include geometric models for ubiquitous computing and nmiddleware support for mobile, context-aware applications.
The most widely publicized, and arguably most damaging, types of malicious traffic on theInternet today include worms, spam, viruses and denial of service attacks. Internet wormsself propagate across networks exploiting flaws in operating systems and services,spreading viruses and congesting network links. It isthe aim of this dissertation to investigate approaches for detecting a wide range of maliciousactivity such as worms and (d)DoS. This dissertationdescribes the design and implementation of aframework for distributed intrusion detection. Theframework features heterogeneous sensors with aconfigurable event source that can adapt bydynamically composing components at run-time. Thesensors are controlled remotely by a management application that can configure, extend and controlsensors individually. The framework is extensible and allows researchers to quicklyimplement and evaluate detection techniques in a live network environment. It was found that the framework could successfully detect a range ofmalicious activity including worms on both lowutilisation dial-up links and gateway router links.
The most widely publicized, and arguably most
damaging, types of malicious traffic on the
Internet today include worms, spam, viruses and
denial of service attacks. Internet worms
self propagate across networks exploiting flaws in
operating systems and services,
spreading viruses and congesting network links. It is
the aim of this dissertation to investigate
approaches for detecting a wide range of malicious
activity such as worms and (d)DoS. This dissertation
describes the design and implementation of a
framework for distributed intrusion detection. The
framework features heterogeneous sensors with a
configurable event source that can adapt by
dynamically composing components at run-time. The
sensors are controlled remotely by a management
application that can configure, extend and control
sensors individually. The framework is
extensible and allows researchers to quickly
implement and evaluate detection techniques
in a live network environment. It was found that the
framework could successfully detect a range of
malicious activity including worms on both low
utilisation dial-up links and gateway router links.
Dr. Éamonn Linehan is a research fellow in the Distributed
Systems Group at Trinity College Dublin. His current research
interests include geometric models for ubiquitous computing and
middleware support for mobile, context-aware applications.
Über den Autor
Dr. Éamonn Linehan is a research fellow in the Distributed Systems Group at Trinity College Dublin. His current research interests include geometric models for ubiquitous computing and middleware support for mobile, context-aware applications.
Klappentext
The most widely publicized, and arguably most damaging, types of malicious traffic on theInternet today include worms, spam, viruses and denial of service attacks. Internet wormsself propagate across networks exploiting flaws in operating systems and services,spreading viruses and congesting network links. It isthe aim of this dissertation to investigate approaches for detecting a wide range of maliciousactivity such as worms and (d)DoS. This dissertationdescribes the design and implementation of aframework for distributed intrusion detection. Theframework features heterogeneous sensors with aconfigurable event source that can adapt bydynamically composing components at run-time. Thesensors are controlled remotely by a management application that can configure, extend and controlsensors individually. The framework is extensible and allows researchers to quicklyimplement and evaluate detection techniques in a live network environment. It was found that the framework could successfully detect a range ofmalicious activity including worms on both lowutilisation dial-up links and gateway router links.
