Publication Details

Detection of Network Buffer Overflow Attacks: A Case Study

BARABAS, M.; HOMOLIAK, I.; HANÁČEK, P.; KAČIC, M. Detection of Network Buffer Overflow Attacks: A Case Study. The 47th Annual International Carnahan Conference on Security Technology. Mendellin: Institute of Electrical and Electronics Engineers, 2013. p. 128-131. ISBN: 978-958-8790-65-7.
Czech title
Detekce síťových útoků na principu přetečení zásobníku: Případová studie
Type
conference paper
Language
English
Authors
Barabas Maroš, Ing., Ph.D.
Homoliak Ivan, Ing., Ph.D. (DITS)
Hanáček Petr, doc. Dr. Ing. (DITS)
Kačic Matej, Ing., Ph.D.
Keywords

buffer overflow, detection, ids, network metrics

Abstract

This paper presents an automated detection method based on classification of network traffic using predefined set of network metrics. We proposed the set of metrics with focus on behavior of buffer overflow attacks and their sufficient description without the need of deep packet inspection. In this paper we describe two laboratory experiments of automated detection of buffer overflow attacks on vulnerable network services and their description by proposed set of network metrics. We present the principles of several chosen network metrics and their application on experimental attacks according to their nature in comparison to valid communication.

Published
2013
Pages
128–131
Proceedings
The 47th Annual International Carnahan Conference on Security Technology
ISBN
978-958-8790-65-7
Publisher
Institute of Electrical and Electronics Engineers
Place
Mendellin
BibTeX 
@inproceedings{BUT103487,
  author="Maroš {Barabas} and Ivan {Homoliak} and Petr {Hanáček} and Matej {Kačic}",
  title="Detection of Network Buffer Overflow Attacks: A Case Study",
  booktitle="The 47th Annual International Carnahan Conference on Security Technology",
  year="2013",
  pages="128--131",
  publisher="Institute of Electrical and Electronics Engineers",
  address="Mendellin",
  isbn="978-958-8790-65-7",
  url="https://www.fit.vut.cz/research/publication/10321/"
}
Back to top