26 citations · 39 across the 4 of their papers we have counts for
Showing 2020Show all
2 papers · 1 filter
cs.CR2020★ 1 cited
Scan Correlation -- Revealing distributed scan campaigns
Steffen Haas, Florian Wilkens, Mathias Fischer
Public networks are exposed to port scans from the Internet. Attackers search for vulnerable services they can exploit. In large scan campaigns, attackers often utilize different m…
cs.CR2020★ 26 cited
zeek-osquery: Host-Network Correlation for Advanced Monitoring and Intrusion Detection
Steffen Haas, Robin Sommer, Mathias Fischer
Intrusion Detection Systems (IDSs) can analyze network traffic for signs of attacks and intrusions. However, encrypted communication limits their visibility and sophisticated attac…