• No results found

SSHCure: SSH Intrusion Detection using NetFlow and IPFIX

N/A
N/A
Protected

Academic year: 2021

Share "SSHCure: SSH Intrusion Detection using NetFlow and IPFIX"

Copied!
1
0
0

Bezig met laden.... (Bekijk nu de volledige tekst)

Hele tekst

(1)

Luuk Hendriks, Rick Hofstede, Anna Sperotto, Aiko Pras

SSHCure: SSH Intrusion Detection

using NetFlow and IPFIX

Design and Analysis of Communication Systems, University of Twente {luuk.hendriks,r.j.hofstede,a.sperotto,a.pras}@utwente.nl

Adoption and deployments:

We see an increasing number of

SSH attacks. Measurements show that a typical NREN enables for more than 1000 attacks per

day. While few of these are

successful (i.e. end in a

compromise), the ones that do

succeed can cause severe damage in a plethora of different

ways.

• Scalable, deployed in NREN with up to 13 backbone links • Privacy preserving

• No performance impact on the network level

• Accurate detection for different phases within an attack

• Easily deployed as an NfSen plugin

SSHCure is able to analyze large amount of flow data and show what is really going on in the network, alerting

administrators in real time.

Referenties

GERELATEERDE DOCUMENTEN

The purpose of the study was to determine the prevalence of rheumatoid arthritis (RA) and associated comorbidities, as well as to investigate antirheumatic

Mapping the extent of crop pests & diseases and their associated yield losses.. Andy Nelson, ITC, University of

We apply the proposed integrated framework to the case of the purse seine tuna fishery in the WCPO region and the benefits of seafood provision as a marine ES generated from this

Firms with high customer concentration face a higher demand uncertainty because specific investments prevent firms from easily finding alternative sales opportunities when

A novel four-dimensional angiographic approach to assess dynamic superficial wall stress of coronary arteries in vivo: initial experience in evaluating vessel sites with subsequent

While it is well known that a superconductive device can be used as sensitive detec- tor of various quantities that can be converted in a very small magnetic field signal, it is

monolayers at a concentration of 0.1% w/v of different combination ratios of Aloe vera and TMC plotted as a function of time (n = 3, mean ± SD)...99.. Aloe vera and TMC)

Although  specially  earmarked  funding  opportunities  for  systems  biology,  having  boosted  the