Abstract
In recent years, IP flow identification in botnet detection attracts attentions in network security. IP flows associated with bot masters can be used to trace the botnet source. Most botnets suffer a large of IP-based attacks. This paper attempts to explore the correlations between attack behaviors and IP flows. By data collection, sets of functions concerning inference rules and conversion of data format, this paper successfully identifies the botnet attacks by IP flows and the inference patterns. The IP flow-based intrusion detection can efficiently find alert data correlation.
| Original language | English |
|---|---|
| Title of host publication | MEMS, NANO and Smart Systems |
| Pages | 1211-1213 |
| Number of pages | 3 |
| DOIs | |
| Publication status | Published - 2012 Jan 1 |
| Event | 2011 7th International Conference on MEMS, NANO and Smart Systems, ICMENS 2011 - Kuala Lumpur, Malaysia Duration: 2011 Nov 4 → 2011 Nov 6 |
Publication series
| Name | Advanced Materials Research |
|---|---|
| Volume | 403-408 |
| ISSN (Print) | 1022-6680 |
Other
| Other | 2011 7th International Conference on MEMS, NANO and Smart Systems, ICMENS 2011 |
|---|---|
| Country | Malaysia |
| City | Kuala Lumpur |
| Period | 11-11-04 → 11-11-06 |
All Science Journal Classification (ASJC) codes
- Engineering(all)
Fingerprint Dive into the research topics of 'IP flow data correlation with inference rules'. Together they form a unique fingerprint.
Cite this
Jiang, C. B., & Li, J-S. (2012). IP flow data correlation with inference rules. In MEMS, NANO and Smart Systems (pp. 1211-1213). (Advanced Materials Research; Vol. 403-408). https://doi.org/10.4028/www.scientific.net/AMR.403-408.1211