Activity Monitoring for large honeynets and network telescopes

Jérôme François 1 Radu State 1 Olivier Festor 1
1 MADYNES - Management of dynamic networks and services
INRIA Lorraine, LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications
Abstract : This paper proposes a new distributed monitoring approach based on the notion of centrality of a graph and its evolution in time. We consider an activity profiling method for a distributed monitoring platform and illustrate its usage in two different target deployments. The first one concerns the monitoring of a distributed honeynet, while the second deployment target is the monitoring of a large network telescope. The central concept underlying our work are the intersection graphs and a centrality based locality statistics. These graphs have not been used widely in the field of network security. The advantage of this method is that analyzing aggregated activity data is possible by considering the curve of the maximum locality statistics and that important change point moments are well identified.
Type de document :
Article dans une revue
International Journal On Advances in Systems and Measurements, IARIA, 2008, 1 (1), pp.1-13
Liste complète des métadonnées

Littérature citée [16 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/inria-00392566
Contributeur : Jérôme François <>
Soumis le : mardi 1 décembre 2009 - 13:10:27
Dernière modification le : jeudi 11 janvier 2018 - 06:19:50
Document(s) archivé(s) le : lundi 15 octobre 2012 - 12:05:24

Fichier

ijasm.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

  • HAL Id : inria-00392566, version 1

Collections

Citation

Jérôme François, Radu State, Olivier Festor. Activity Monitoring for large honeynets and network telescopes. International Journal On Advances in Systems and Measurements, IARIA, 2008, 1 (1), pp.1-13. 〈inria-00392566〉

Partager

Métriques

Consultations de la notice

218

Téléchargements de fichiers

257