Abstract
In this paper, we develop network traffic monitoring tool in order to analyze and monitor a network environment effectively. The network traffic analysis and monitoring system is designed based on attack knowledge for EWS(Early Warning System). It consists of an agent for host, a database server and administrator’s tool. Each host agent captures and collects network traffic information using WinPcap library, and send those information to the database server. The database server classifies and keeps necessary information from all the information sent, and provides those information when the administrator requests the information. The administrator’s tool combines the information from the server, applies the analysis of correlation, and confirms the network attack situation. This system can monitor the network traffics and analyze global traffic stream effectively, and aware various internet attack situations. The system was designed using C++ and ODBC (Open Database Connectivity).
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Kim, H.A., Karp, B.: Autograph: Toward Automated, Distributed Worm Signature Detection. In: 13th Usenix Security Symposium (Security 2004) (August 2004)
Gatner, IDS a failure. firewalls recommanded, Web Host Industry Review. June 11
Debar, H., Wespi, A.: Aggregation and Correlation of Intrusion-Detection Alerts. In: Lee, W., Mé, L., Wespi, A. (eds.) RAID 2001. LNCS, vol. 2212, pp. 85–103. Springer, Heidelberg (2001)
Schnackenberg, D., Djahandari, K., Dterene, D.: Infrastructure for Intrusion Detection and Response. In: Proceedings of DISCEX (January 2000)
Mahoney, M.V., Phad, P.K.C.: Packet header anomaly detection for indentifying hostile network traffic, Florida Tech, CS-2001-4 (2001)
Krugel, T.T.C., Kirda, E.: Service specific anomaly detection for network intrusion detection. In: Proceeding of Symposium on Applied Computing (March 2002)
Porras, P.A., Newmann, P.G.: EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances. In: Proceedings of the 20th NIS Security Conference (October 1997)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2006 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Lee, G., Han, I., Kim, Y. (2006). A Design of Network Traffic Analysis and Monitoring System for Early Warning System. In: Min, G., Di Martino, B., Yang, L.T., Guo, M., Rünger, G. (eds) Frontiers of High Performance Computing and Networking – ISPA 2006 Workshops. ISPA 2006. Lecture Notes in Computer Science, vol 4331. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11942634_102
Download citation
DOI: https://doi.org/10.1007/11942634_102
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-49860-5
Online ISBN: 978-3-540-49862-9
eBook Packages: Computer ScienceComputer Science (R0)