Real-Time Stepping Stone Detection Based on RTT
Lei Cheng, Zhang Hongqi · 2013
As data center presenting distributed architecture characteristics, data scale showing a trend of expanding in Internet e-government, there are more and more stepping stone attacks in net-flow security exchange to steal sensitive information. The problem of real-time detection of whether hosts establishing connection with servers are stepping stones needs to be solved instantly. Different with former schemes, the purpose of this paper is to detect whether hosts establishing connection with server are stepping stones. Besides, it proposes corresponding algorithm aimed it Nagle problem. This scheme can properly resist packet encryption and packet transformation problems. Finally, it calculates detection accuracy lower bound by theoretical analysis and proves real-time and high accuracy of this scheme through experiments.