Presentation 2011-12-16
SSH Brute Force Attack Detection based on Flow Features Analysis
Akihiro SATOH, Yutaka NAKAMURA, Takeshi IKENAGA,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) SSH brute force attack has become more seriously, so administrators are desired to implement its countermeasures. In the traditional ways, the SSH brute force attack has been detected by analyzing access logs and network traffic. However, the former way must check a huge quantity of the logs in all servers, and the latter cannot find victims of the attacks. To solve these problems, we propose SSH brute force attack detection based on the flow features analysis. As the experimental results, we showed to be able to identify the attacks and their victims.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) SSH Brute Force Attack / Flow Features / Traffic Analysis / Network Management
Paper # IN2011-119
Date of Issue

Conference Information
Committee IN
Conference Date 2011/12/8(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Information Networks (IN)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) SSH Brute Force Attack Detection based on Flow Features Analysis
Sub Title (in English)
Keyword(1) SSH Brute Force Attack
Keyword(2) Flow Features
Keyword(3) Traffic Analysis
Keyword(4) Network Management
1st Author's Name Akihiro SATOH
1st Author's Affiliation Kyushu Institute of Technology()
2nd Author's Name Yutaka NAKAMURA
2nd Author's Affiliation Kyushu Institute of Technology
3rd Author's Name Takeshi IKENAGA
3rd Author's Affiliation Kyushu Institute of Technology
Date 2011-12-16
Paper # IN2011-119
Volume (vol) vol.111
Number (no) 346
Page pp.pp.-
#Pages 6
Date of Issue