Name
Abstract | ||
|---|---|---|
Sampling techniques are often used for traffic monitoring in high-speed links in order to avoid saturation of network resources. Although there is a wide existing research dealing with anomaly detection, few studies analyzed the impact of sampling on the performance of portscan detection algorithms. In this paper, we performed several experiments on two already existing portscan detection mechanisms to test whether they are robust enough to different sampling techniques. Unlike previous works, we found that flow sampling is not always better than packet sampling to continue detecting portscans reliably. |
Year | DOI | Venue |
|---|---|---|
2009 | 10.1007/978-3-642-01645-5_4 | TMA |
Keywords | Field | DocType |
anomaly detection,portscan detection,portscan detection algorithm,sampling technique,portscan detection mechanism,different sampling technique,high-speed link,previous work,sampled netflow,network resource,wide existing research,flow sampling | Anomaly detection,Resource (disambiguation),Computer science,NetFlow,Real-time computing,Sampling (statistics),Packet sampling | Conference |
Volume | ISSN | Citations |
5537 | 0302-9743 | 15 |
PageRank | References | Authors |
0.85 | 8 | 3 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Ignasi Paredes-Oliva | 1 | 33 | 3.32 |
| Pere Barlet-ros | 2 | 269 | 27.74 |
| Josep Solé-pareta | 3 | 436 | 58.67 |