Constructing Correlations in Attack Connection Chains Using Inter-Packet Delay
Xue Wan-xin · Journal of Henan Polytechnic University · 2007
When inter-packet delay exist,the algorithm of connection chain correlation check on inter-packet delay which presented by Wang Xinyuan can not detect connection correlation correctly.Via presenting the concepts of inter-packet delay average,the optizimizing algorithm is designed specifically to be robust against timing perturbations over sufficiently long flows.The experiments show that this method is availability and robust in random packet timing perturbations by adjusting parameter.