Novel mechanism of network protection against the new generation of cyber attacks

Alexander Milovanov; Leonid Bukshpun; Ranjit Pradhan

doi:10.1117/12.921027

Translator Disclaimer

18 June 2012 Novel mechanism of network protection against the new generation of cyber attacks

Alexander Milovanov, Leonid Bukshpun, Ranjit Pradhan

Author Affiliations +

Proceedings Volume 8359, Sensors, and Command, Control, Communications, and Intelligence (C3I) Technologies for Homeland Security and Homeland Defense XI; 835904 (2012) https://doi.org/10.1117/12.921027
Event: SPIE Defense, Security, and Sensing, 2012, Baltimore, Maryland, United States

Abstract

A new intelligent mechanism is presented to protect networks against the new generation of cyber attacks. This mechanism integrates TCP/UDP/IP protocol stack protection and attacker/intruder deception to eliminate existing TCP/UDP/IP protocol stack vulnerabilities. It allows to detect currently undetectable, highly distributed, low-frequency attacks such as distributed denial-of-service (DDoS) attacks, coordinated attacks, botnet, and stealth network reconnaissance. The mechanism also allows insulating attacker/intruder from the network and redirecting the attack to a simulated network acting as a decoy. As a result, network security personnel gain sufficient time to defend the network and collect the attack information. The presented approach can be incorporated into wireless or wired networks that require protection against known and the new generation of cyber attacks.

Citation Download Citation

Alexander Milovanov, Leonid Bukshpun, and Ranjit Pradhan "Novel mechanism of network protection against the new generation of cyber attacks", Proc. SPIE 8359, Sensors, and Command, Control, Communications, and Intelligence (C3I) Technologies for Homeland Security and Homeland Defense XI, 835904 (18 June 2012); https://doi.org/10.1117/12.921027

ACCESS THE FULL ARTICLE