Improving security management through passive network observation

Benjamin Morin; Yohann Thomas; Hervé Debar

doi:10.1109/ARES.2006.74

Improving security management through passive network observation

Benjamin Morin
, Yohann Thomas
, Hervé Debar

France Télécom R and D
Supelec

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Detailed and reliable knowledge of the characteristics of an information system is becoming a very important feature for operational security. Unfortunately, vulnerability assessment tools have important side effects on the monitored information systems. In this paper, we propose an approach to gather or deduce information similar to vulnerability assessment reports, based on passive network observation. Information collected goes beyond classic server vulnerability assessment, enabling compliance verification of desktop clients.

Original language	English
Title of host publication	Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006
Publisher	IEEE Computer Society
Pages	382-389
Number of pages	8
ISBN (Print)	0769525679, 9780769525679
DOIs	https://doi.org/10.1109/ARES.2006.74
Publication status	Published - 1 Jan 2006
Externally published	Yes
Event	1st International Conference on Availability, Reliability and Security, ARES 2006 - Vienna, Austria Duration: 20 Apr 2006 → 22 Apr 2006

Publication series

Name	Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006
Volume	2006

Conference

Conference	1st International Conference on Availability, Reliability and Security, ARES 2006
Country/Territory	Austria
City	Vienna
Period	20/04/06 → 22/04/06

Access to Document

10.1109/ARES.2006.74

Cite this

Morin, B., Thomas, Y., & Debar, H. (2006). Improving security management through passive network observation. In Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006 (pp. 382-389). (Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006; Vol. 2006). IEEE Computer Society. https://doi.org/10.1109/ARES.2006.74

@inproceedings{3ca1a6c55e444fefbff20f1d174578b2,

title = "Improving security management through passive network observation",

abstract = "Detailed and reliable knowledge of the characteristics of an information system is becoming a very important feature for operational security. Unfortunately, vulnerability assessment tools have important side effects on the monitored information systems. In this paper, we propose an approach to gather or deduce information similar to vulnerability assessment reports, based on passive network observation. Information collected goes beyond classic server vulnerability assessment, enabling compliance verification of desktop clients.",

author = "Benjamin Morin and Yohann Thomas and Herv{\'e} Debar",

year = "2006",

month = jan,

day = "1",

doi = "10.1109/ARES.2006.74",

language = "English",

isbn = "0769525679",

series = "Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006",

publisher = "IEEE Computer Society",

pages = "382--389",

booktitle = "Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006",

note = "1st International Conference on Availability, Reliability and Security, ARES 2006 ; Conference date: 20-04-2006 Through 22-04-2006",

}

Morin, B, Thomas, Y & Debar, H 2006, Improving security management through passive network observation. in Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006. Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006, vol. 2006, IEEE Computer Society, pp. 382-389, 1st International Conference on Availability, Reliability and Security, ARES 2006, Vienna, Austria, 20/04/06. https://doi.org/10.1109/ARES.2006.74

Improving security management through passive network observation. / Morin, Benjamin; Thomas, Yohann; Debar, Hervé.
Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006. IEEE Computer Society, 2006. p. 382-389 (Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006; Vol. 2006).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Improving security management through passive network observation

AU - Morin, Benjamin

AU - Thomas, Yohann

AU - Debar, Hervé

PY - 2006/1/1

Y1 - 2006/1/1

N2 - Detailed and reliable knowledge of the characteristics of an information system is becoming a very important feature for operational security. Unfortunately, vulnerability assessment tools have important side effects on the monitored information systems. In this paper, we propose an approach to gather or deduce information similar to vulnerability assessment reports, based on passive network observation. Information collected goes beyond classic server vulnerability assessment, enabling compliance verification of desktop clients.

AB - Detailed and reliable knowledge of the characteristics of an information system is becoming a very important feature for operational security. Unfortunately, vulnerability assessment tools have important side effects on the monitored information systems. In this paper, we propose an approach to gather or deduce information similar to vulnerability assessment reports, based on passive network observation. Information collected goes beyond classic server vulnerability assessment, enabling compliance verification of desktop clients.

U2 - 10.1109/ARES.2006.74

DO - 10.1109/ARES.2006.74

M3 - Conference contribution

AN - SCOPUS:33750945128

SN - 0769525679

SN - 9780769525679

T3 - Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006

SP - 382

EP - 389

BT - Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006

PB - IEEE Computer Society

T2 - 1st International Conference on Availability, Reliability and Security, ARES 2006

Y2 - 20 April 2006 through 22 April 2006

ER -

Improving security management through passive network observation

Abstract

Publication series

Conference

Access to Document

Fingerprint

Cite this