DMCA
Framework for Creating Realistic Port Scanning Benchmarks
BibTeX
@MISC{Al-tamimi_frameworkfor,
author = {Mustafa Al-tamimi and Wassim El-hajj and Fadi Aloul},
title = {Framework for Creating Realistic Port Scanning Benchmarks},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Abstract- Port scanning is one of the most popular reconnaissance techniques that many attackers use to profile running services on a potential target before launching an attack. Many port scanning detection mechanisms have been suggested in literature. However, very little work has been done on generating port scanning benchmarks that researchers can use to test their detection methods. In this paper, we suggest a simulation framework using OMNeT++ to generate benchmarks that resemble real-life traffic. We approach the problem by dividing it into three modules (topology creation, good traffic generation, bad traffic generation), each of which we make realistic, similar to deployed and usable networks. Hence the resultant benchmark is annotated and made public.
Keyphrases
creating realistic port scanning benchmark detection method abstract port scanning little work simulation framework potential target many attacker detection mechanism good traffic generation topology creation usable network bad traffic generation popular reconnaissance technique resemble real-life traffic resultant benchmark many port
