Advanced search ?

Object

Download

Title: Tunneling Activities Detection Using Machine Learning Techniques, Journal of Telecommunications and Information Technology, 2011, nr 1

Creator:

Dubois, Renaud ; Morel, Mathieu ; Allard, Fabien ; Gompel, Paul

Date:

2011, nr 1

Resource Type:

artykuł

Description:

Tunnel establishment, like HTTPS tunnel or related ones, between a computer protected by a security gateway and a remote server located outside the protected network is the most effective way to bypass the network security policy. Indeed, a permitted protocol can be used to embed a forbidden one until the remote server. Therefore, if the resulting information flow is ciphered, security standard tools such as application level gateways (ALG), firewalls, intrusion detection system (IDS), do not detect this violation. In this paper, we describe a statistical analysis of ciphered flows that allows detection of the carried inner protocol. Regarding the deployed security policy, this technology could be added in security tools to detect forbidden protocols usages. In the defence domain, this technology could help preventing information leaks through side channels. At the end of this article, we present a tunnel detection tool architecture and the results obtained with our approach on a public database containing real data flows.

Publisher:

Instytut Łączności - Państwowy Instytut Badawczy, Warszawa

Format:

application/pdf

Resource Identifier:

oai:bc.itl.waw.pl:1159 ; ISSN 1509-4553, on-line: ISSN 1899-8852

DOI:

10.26636/jtit.2011.1.1132

ISSN:

1509-4553

eISSN:

1899-8852

Source:

Journal of Telecommunications and Information Technology

Language:

ang

Rights Management:

Biblioteka Naukowa Instytutu Łączności

Subject and keywords:

network security cyberdefense hidden Markov models RandomForest decision trees HTTPS tunnel

Object collections:

Last modified:

Aug 28, 2024

In our library since:

Jan 17, 2013

Number of object content hits:

209

All available object's versions:

https://bc.itl.waw.pl/publication/1419

Show description in RDF format:

RDF

Show description in OAI-PMH format:

OAI-PMH

Edition name Date
Allard, Fabien, 2011, nr 1, Tunneling Activities Detection Using Machine Learning Techniques, Journal of Telecommunications and Information Technology, 2011, nr 1 Aug 28, 2024

Objects Similar
Detection of DDoS Attacks in OpenStack-based Private Cloud Using Apache Spark, Journal of Telecommunications and Information Technology, 2020, nr 4

Shinde, Sumedha Gumaste, Shweta K, Amit G., Narayan D.

2020, nr 4
artykuł
2024, nr 3, JTIT-artykuły
2024, nr 3, JTIT-artykuły
A Collaborative Approach to Detecting DDoS Attacks in SDN Using Entropy and Deep Learning, Journal of Telecommunications and Information Technology, 2024, nr 3

Narayan, D. G. Heena, W Amit, K

2024, nr 3
artykuł
L-SCANN: Logarithmic Subcentroid and Nearest Neighbor , Journal of Telecommunications and Information Technology, 2016, nr 4

Ahmad, Tohari Muchammad, Kharisma

2016, nr 4
artykuł
Implementation of a Malicious Traffic Filter Using Snort and Wireshark as a Proof of Concept to Enhance Mobile Network Security, Journal of Telecommunications and Information Technology, 2022, nr 1

Murugesan, Raja Kumar Afzal, Rafia

2022, nr 1
artykuł
QoS Requirements as Factor of Trust to 5G Network, Journal of Telecommunications and Information Technology, 2016, nr 1

Bochechka, Grigory Tikhvinskiy, Valery Gryazev, Andrey

2016, nr 1
artykuł
Uplift Modeling in Direct Marketing, Journal of Telecommunications and Information Technology, 2012, nr 2

Rzepakowski, Piotr Jaroszewicz, Szymon

2012, nr 2
artykuł
Detecting Password File Theft using Predefined Time-Delays between Certain Password Characters, Journal of Telecommunications and Information Technology, 2017, nr 4

Mahmoud, Khaled W. Makableh, Alaa Mansour, Khalid

2017, nr 4
artykuł
Anomaly Detection Framework Based on Matching Pursuit for Network Security Enhancement, Journal of Telecommunications and Information Technology, 2011, nr 1

Hołubowicz, Witold Renk, Rafał

2011, nr 1
artykuł
More
×

Citation

Citation style:

Contact details

Address

Instytut Łączności – Państwowy Instytut Badawczy ul. Szachowa 1 04-894 Warszawa

Phone

(+48) 5128 696

E-Mail

biblioteka@il-pib.pl

Visit us!

This page uses 'cookies'. More information