The Experts below are selected from a list of 1842 Experts worldwide ranked by ideXlab platform
Tibor Horak - One of the best experts on this subject based on the ideXlab platform.
-
iot measuring of udp based distributed reflective dos attack
International Symposium on Intelligent Systems and Informatics, 2018Co-Authors: Ladislav Huraj, Marek Simon, Tibor HorakAbstract:IoT devices and their fast growth on the Internet cause many cyber-attacks problems. The number of compromised IoT devices can be used by DDoS (Distributed Denial of Service) attackers to imitate valid request packet or to form illegal request packet to the victim with a spoofed source IP addresses to hide themselves, meanwhile giving rise the system collapse, the obstruction of Network/traffic, or disrupting of the victim Internet operation. In this article is demonstrated a specific kind of DDoS attack involving usually accessible IoT devices - the UDP-based Distributed Reflective DoS Attack (DRDoS). The packets are flooded by the attacker to the IoT device as a reflector with a source IP address set to the IP address of the victim who obtains the reflected replies and can be overloaded. To examine this kind of attack, there has to be four representatives of heterogeneous IoT devices involved: an IP camera, a smart light-bulb, a Network Printer, and a small single-board computer Raspberry Pi. This article illustrates the possibility of the IoT devices to be integrated into DRDoS attack and to flood a Network as well as their potential to form a targeted attack on a narticular victim machine.
Yuval Elovici - One of the best experts on this subject based on the ideXlab platform.
-
PIDS - A Behavioral Framework for Analysis and Detection of Network Printer Attacks.
arXiv: Cryptography and Security, 2018Co-Authors: Asaf Hecht, Adi Sagi, Yuval EloviciAbstract:Nowadays, every organization might be attacked through its Network Printers. The malicious exploitation of printing protocols is a dangerous and underestimated threat against every Printer today, as highlighted by recent published researches. This article presents PIDS (Printers' IDS), an intrusion detection system for detecting attacks on printing protocols. PIDS continuously captures various features and events obtained from traffic produced by printing protocols in order to detect attacks. As part of this research we conducted thousands of automatic and manual printing protocol attacks on various Printers and recorded thousands of the Printers' benign Network sessions. Then we applied various supervised machine learning (ML) algorithms to classify the collected data as normal (benign) or abnormal (malicious). We evaluated several detection algorithms, feature selection methods, and the features needed in order to obtain the best detection results for protocol traffic of Printers. Our empirical results suggest that the proposed framework is effective in detecting printing protocol attacks, providing an accuracy of 99.9 with negligible fall-positive rate.
Ladislav Huraj - One of the best experts on this subject based on the ideXlab platform.
-
iot measuring of udp based distributed reflective dos attack
International Symposium on Intelligent Systems and Informatics, 2018Co-Authors: Ladislav Huraj, Marek Simon, Tibor HorakAbstract:IoT devices and their fast growth on the Internet cause many cyber-attacks problems. The number of compromised IoT devices can be used by DDoS (Distributed Denial of Service) attackers to imitate valid request packet or to form illegal request packet to the victim with a spoofed source IP addresses to hide themselves, meanwhile giving rise the system collapse, the obstruction of Network/traffic, or disrupting of the victim Internet operation. In this article is demonstrated a specific kind of DDoS attack involving usually accessible IoT devices - the UDP-based Distributed Reflective DoS Attack (DRDoS). The packets are flooded by the attacker to the IoT device as a reflector with a source IP address set to the IP address of the victim who obtains the reflected replies and can be overloaded. To examine this kind of attack, there has to be four representatives of heterogeneous IoT devices involved: an IP camera, a smart light-bulb, a Network Printer, and a small single-board computer Raspberry Pi. This article illustrates the possibility of the IoT devices to be integrated into DRDoS attack and to flood a Network as well as their potential to form a targeted attack on a narticular victim machine.
Asaf Hecht - One of the best experts on this subject based on the ideXlab platform.
-
PIDS - A Behavioral Framework for Analysis and Detection of Network Printer Attacks.
arXiv: Cryptography and Security, 2018Co-Authors: Asaf Hecht, Adi Sagi, Yuval EloviciAbstract:Nowadays, every organization might be attacked through its Network Printers. The malicious exploitation of printing protocols is a dangerous and underestimated threat against every Printer today, as highlighted by recent published researches. This article presents PIDS (Printers' IDS), an intrusion detection system for detecting attacks on printing protocols. PIDS continuously captures various features and events obtained from traffic produced by printing protocols in order to detect attacks. As part of this research we conducted thousands of automatic and manual printing protocol attacks on various Printers and recorded thousands of the Printers' benign Network sessions. Then we applied various supervised machine learning (ML) algorithms to classify the collected data as normal (benign) or abnormal (malicious). We evaluated several detection algorithms, feature selection methods, and the features needed in order to obtain the best detection results for protocol traffic of Printers. Our empirical results suggest that the proposed framework is effective in detecting printing protocol attacks, providing an accuracy of 99.9 with negligible fall-positive rate.
Marek Simon - One of the best experts on this subject based on the ideXlab platform.
-
iot measuring of udp based distributed reflective dos attack
International Symposium on Intelligent Systems and Informatics, 2018Co-Authors: Ladislav Huraj, Marek Simon, Tibor HorakAbstract:IoT devices and their fast growth on the Internet cause many cyber-attacks problems. The number of compromised IoT devices can be used by DDoS (Distributed Denial of Service) attackers to imitate valid request packet or to form illegal request packet to the victim with a spoofed source IP addresses to hide themselves, meanwhile giving rise the system collapse, the obstruction of Network/traffic, or disrupting of the victim Internet operation. In this article is demonstrated a specific kind of DDoS attack involving usually accessible IoT devices - the UDP-based Distributed Reflective DoS Attack (DRDoS). The packets are flooded by the attacker to the IoT device as a reflector with a source IP address set to the IP address of the victim who obtains the reflected replies and can be overloaded. To examine this kind of attack, there has to be four representatives of heterogeneous IoT devices involved: an IP camera, a smart light-bulb, a Network Printer, and a small single-board computer Raspberry Pi. This article illustrates the possibility of the IoT devices to be integrated into DRDoS attack and to flood a Network as well as their potential to form a targeted attack on a narticular victim machine.