ETRI-Knowledge Sharing Plaform

KOREAN
논문 검색
Type SCI
Year ~ Keyword

Detail

Conference Paper Implementation of Netflow based Interactive Connection Traceback System
Cited - time in scopus Share share facebook twitter linkedin kakaostory
Authors
Jung-Tae Kim, Ik-Kyun Kim, Koo-Hong Kang
Issue Date
2015-11
Citation
International Conference on Systems and Networks Communications (ICSNC) 2015, pp.21-26
Language
English
Type
Conference Paper
Abstract
The paper proposes a method and system for finding stepping stones, as well as origins of the advanced cyber attacks based on the interactive connections traceback system. To do so, the traceback system to be installed at the enterprise gateway utilizes distributed netflow collectors that subscribe netflow information from nearby edge routers with command configured to support netflow generation and traceback agents for finding real-time connections from the victim to attacker. By implementing such a system would support the real-time connection traceback of the attack origins for the interactive hacking attacks without any helps of the Internet Service Providers or governmental security organizations.
KSP Keywords
Cyber attacks, Internet service provider, Real-time, Stepping-stone, edge router