| Presentation | 2019-06-07 A method to detect host scan and isolate malicious hosts in LAN Ayato Tokubi, Hideya Ochiai, Hiroshi Esaki, |
|---|---|
| PDF Download Page |  PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | In this paper, we propose a system to isolate an abnormal host from the network by detecting the scan executed by the malware. In the existing research, the detection method of the scan is not suitable for the network in which many modern IoT devices are used, such as introduction of the network monitoring system, necessity of prior learning, and necessity of installing the program in each host. To detect scans inexpensively and easily, we have demonstrated that ARP, which is used to resolve MAC addresses from IPv4 addresses, can detect scans on an actual LAN and isolate hosts. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | Security / Scan Detection / LAN / ARP / IoT / Malware |
| Paper # | IA2019-7,ICSS2019-7 |
| Date of Issue | 2019-05-30 (IA, ICSS) |
| Conference Information | |
| Committee | IA / ICSS |
|---|---|
| Conference Date | 2019/6/6(2days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | Research Institute for Electrical Communication, Tohoku University |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | Internet Security, etc. |
| Chair | Hiroyuki Osaki(Kwansei Gakuin Univ.) / Hiroki Takakura(NII) |
| Vice Chair | Rei Atarashi(IIJ) / Toru Kondo(Hiroshima Univ.) / Hiroshi Yamamoto(Ritsumeikan Univ.) / Katsunari Yoshioka(Yokohama National Univ.) / Kazunori Kamiya(NTT) |
| Secretary | Rei Atarashi(Kwansei Gakuin Univ.) / Toru Kondo(KDDI Research) / Hiroshi Yamamoto(NEC) / Katsunari Yoshioka(NICT) / Kazunori Kamiya(KDDI labs.) |
| Assistant | Kenji Ohira(Tokushima Univ.) / Daiki Nobayashi(Kyushu Inst. of Tech.) / Ryohei Banno(Tokyo Inst. of Tech.) / Keisuke Kito(Mitsubishi Electric) / Toshihiro Yamauchi(Okayama Univ.) |
| Paper Information | |
| Registration To | Technical Committee on Internet Architecture / Technical Committee on Information and Communication System Security |
|---|---|
| Language | JPN |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | A method to detect host scan and isolate malicious hosts in LAN |
| Sub Title (in English) | |
| Keyword(1) | Security |
| Keyword(2) | Scan Detection |
| Keyword(3) | LAN |
| Keyword(4) | ARP |
| Keyword(5) | IoT |
| Keyword(6) | Malware |
| 1st Author's Name | Ayato Tokubi |
| 1st Author's Affiliation | The University of Tokyo(UTokyo) |
| 2nd Author's Name | Hideya Ochiai |
| 2nd Author's Affiliation | The University of Tokyo(UTokyo) |
| 3rd Author's Name | Hiroshi Esaki |
| 3rd Author's Affiliation | The University of Tokyo(UTokyo) |
| Date | 2019-06-07 |
| Paper # | IA2019-7,ICSS2019-7 |
| Volume (vol) | vol.119 |
| Number (no) | IA-69,ICSS-70 |
| Page | pp.pp.31-36(IA), pp.31-36(ICSS), |
| #Pages | 6 |
| Date of Issue | 2019-05-30 (IA, ICSS) |