On effectiveness of network sensor-based defense framework
Difan Zhang, Hanlin Zhang, Linqiang Ge, Wei Yu, Chao Lu, Genshe Chen, Khanh Dai Pham · Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE · 2012
Cyber attacks are increasing in frequency, impact, and complexity, which demonstrate extensive network vulnerabilities with the potential for serious damage. Defending against cyber attacks calls for the distributed collaborative monitoring, detection, and mitigation. To this end, we develop a network sensor-based defense framework, with the aim of handling network security awareness, mitigation, and prediction. We implement the prototypical system and show its effectiveness on detecting known attacks, such as port-scanning and distributed denial-of-service (DDoS). Based on this framework, we also implement the statistical-based detection and sequential testing-based detection techniques and compare their respective detection performance. The future implementation of defensive algorithms can be provisioned in our proposed framework for combating cyber attacks.