Abstract
In this paper, the design of hybrid network discovery module is introduced. As hybrid approach, active and passive network discovery techniques are used. Passive network discovery module, especially, is designed to detect desktop applications and ActiveX controls installed on client computers as well as operating system and services on servers. This module can help security administrators identify organization’s IT asset and proactively handle vulnerability information.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
De Montigny-Leboeuf, A., et al.: Passive Network Discovery for Real Time Situation Awareness. In: Proceedings of the RTO IST Symposium on Adaptive Defence in Unclassified Networks (2004)
Webster, S., et al.: Experience Using Active and Passive Mapping for Network Situational Awareness. In: The Fifth IEEE International Symposium on Network Computing and Applications, IEEE Computer Society Press, Los Alamitos (2006)
Thomas, Y., et al.: Improving Security Management through Passive Network Observation. In: The First International Conference on Availability, Reliability and Security (2006)
Lippmann, R., et al.: Passive Operating System Identification From TCP/IP Packet Headers. MIT Lincoln Laboratory (2004)
2007 Information Security White Paper(Written in Japanese), Information-technology Promotion Agency, Japan (2007)
Symantec Internet Security Threat Report - Trends for July?December 06, Symantec (March 2007)
Arkin, O.: A New Hybrid Approach For Infrastructure Discovery, Monitoring and Control, Black Hat USA 2005 (2005)
Stevens, W.R.: TCP/IP Illustrated, vol. 1. Addison-Wesley, Reading (1994)
Author information
Authors and Affiliations
Editor information
Rights and permissions
Copyright information
© 2007 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Ko, K., Kang, P., Sim, W. (2007). Design of Hybrid Network Discovery Module for Detecting Client Applications and ActiveX Controls. In: Gervasi, O., Gavrilova, M.L. (eds) Computational Science and Its Applications – ICCSA 2007. ICCSA 2007. Lecture Notes in Computer Science, vol 4706. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-74477-1_91
Download citation
DOI: https://doi.org/10.1007/978-3-540-74477-1_91
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-74475-7
Online ISBN: 978-3-540-74477-1
eBook Packages: Computer ScienceComputer Science (R0)