Title
Coordinated Scan Detection Algorithm Based on the Global Characteristics of Time Sequence
Abstract
Scanning acquires status information regarding target hosts. In networks, attackers often conduct coordinated scans of the target host or network segment because such scans are efficient and stealthy. However, an algorithm that effectively detects coordinated scans has not yet been developed. In this study, we identify a coordinated scan under a single controller during a clustering analysis of the scan sequence. This scan sequence was determined through time sequence, and the clustering analysis was based on the global characteristics of the time sequence. Simulation and test results demonstrated that the proposed algorithm can detect scans more frequently and more accurately than existing algorithms.
Year
DOI
Venue
2014
10.1504/IJCSE.2018.089576
IJCSE
Keywords
Field
DocType
pattern clustering,time sequence characteristics,scantest,global characteristics,computer network security,scan,clustering analysis,scan, scantest, coordinatedtest, global characteristics, clustering analysis,coordinated scan detection algorithm,coordinatedtest,algorithm design and analysis,correlation,clustering algorithms
Data mining,Control theory,Algorithm design,Network segment,Computer science,Algorithm,Cluster analysis
Conference
Volume
Issue
ISSN
16
1
1742-7185
Citations 
PageRank 
References 
0
0.34
7
Authors
5
Name
Order
Citations
PageRank
Yanli Lv111.71
Yuanlong Li2103.24
Shouzhong Tu300.34
Shuang Xiang410.70
Chunhe Xia56318.30