Coordinated scan detection algorithm based on the global characteristics of time sequence. (2018)

• Record Type: Journal Article
• Authors: Lv, Yanli; Li, Yuanlong; Xiang, Shuang; Xia, Chunhe
• Is Part Of: International journal of computational science and engineering. Volume 16:Number 1(2018)
• Page Start: 42
• Page End: 52
• Publication Date: 2018
• Subjects: scan -- scan test -- coordinated test -- global characteristics -- clustering analysis -- computational science engineering; Computer science -- Mathematics -- Periodicals; Computer simulation -- Mathematical aspects -- Periodicals; Computational intelligence -- Periodicals; 004.015105
• Languages: English
• ISSNs: 1742-7185

Abstract

Scanning is a kind of activities or action for the purpose of acquiring the target host status information. In order to obtain the information more efficiently and more secretly, the attackers in the network often use coordinated scans to scan the target host or network. At present, there are no effective methods to detect the coordinated scan. We take scan sequences as time series and combine the general characteristics of time series. Then based on the features of time series clustering approach, we are going to find the coordinated scans governed by the same controller. Simulation and experiment results show that the methods we propose are better than the existing methods in accuracy and efficiency.