Improving security management through passive network observation

Benjamin Morin; Yohann Thomas; Hervé Debar

doi:10.1109/ARES.2006.74

Improving security management through passive network observation

Benjamin Morin
, Yohann Thomas
, Hervé Debar

France Télécom R and D
Supelec

Résultats de recherche: Le chapitre dans un livre, un rapport, une anthologie ou une collection › Contribution à une conférence › Revue par des pairs

Résumé

Detailed and reliable knowledge of the characteristics of an information system is becoming a very important feature for operational security. Unfortunately, vulnerability assessment tools have important side effects on the monitored information systems. In this paper, we propose an approach to gather or deduce information similar to vulnerability assessment reports, based on passive network observation. Information collected goes beyond classic server vulnerability assessment, enabling compliance verification of desktop clients.

langue originale	Anglais
titre	Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006
Editeur	IEEE Computer Society
Pages	382-389
Nombre de pages	8
ISBN (imprimé)	0769525679, 9780769525679
Les DOIs	https://doi.org/10.1109/ARES.2006.74
état	Publié - 1 janv. 2006
Modification externe	Oui
Evénement	1st International Conference on Availability, Reliability and Security, ARES 2006 - Vienna, Autriche Durée: 20 avr. 2006 → 22 avr. 2006

Série de publications

Nom	Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006
Volume	2006

Une conférence

Une conférence	1st International Conference on Availability, Reliability and Security, ARES 2006
Pays/Territoire	Autriche
La ville	Vienna
période	20/04/06 → 22/04/06

Accès au document

10.1109/ARES.2006.74

Contient cette citation

Morin, B., Thomas, Y., & Debar, H. (2006). Improving security management through passive network observation. Dans Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006 (p. 382-389). (Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006; Vol 2006). IEEE Computer Society. https://doi.org/10.1109/ARES.2006.74

@inproceedings{3ca1a6c55e444fefbff20f1d174578b2,

title = "Improving security management through passive network observation",

abstract = "Detailed and reliable knowledge of the characteristics of an information system is becoming a very important feature for operational security. Unfortunately, vulnerability assessment tools have important side effects on the monitored information systems. In this paper, we propose an approach to gather or deduce information similar to vulnerability assessment reports, based on passive network observation. Information collected goes beyond classic server vulnerability assessment, enabling compliance verification of desktop clients.",

author = "Benjamin Morin and Yohann Thomas and Herv{\'e} Debar",

year = "2006",

month = jan,

day = "1",

doi = "10.1109/ARES.2006.74",

language = "English",

isbn = "0769525679",

series = "Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006",

publisher = "IEEE Computer Society",

pages = "382--389",

booktitle = "Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006",

note = "1st International Conference on Availability, Reliability and Security, ARES 2006 ; Conference date: 20-04-2006 Through 22-04-2006",

}

Morin, B, Thomas, Y & Debar, H 2006, Improving security management through passive network observation. Dans Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006. Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006, VOL. 2006, IEEE Computer Society, p. 382-389, 1st International Conference on Availability, Reliability and Security, ARES 2006, Vienna, Autriche, 20/04/06. https://doi.org/10.1109/ARES.2006.74

Improving security management through passive network observation. / Morin, Benjamin; Thomas, Yohann; Debar, Hervé.
Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006. IEEE Computer Society, 2006. p. 382-389 (Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006; Vol 2006).

Résultats de recherche: Le chapitre dans un livre, un rapport, une anthologie ou une collection › Contribution à une conférence › Revue par des pairs

TY - GEN

T1 - Improving security management through passive network observation

AU - Morin, Benjamin

AU - Thomas, Yohann

AU - Debar, Hervé

PY - 2006/1/1

Y1 - 2006/1/1

N2 - Detailed and reliable knowledge of the characteristics of an information system is becoming a very important feature for operational security. Unfortunately, vulnerability assessment tools have important side effects on the monitored information systems. In this paper, we propose an approach to gather or deduce information similar to vulnerability assessment reports, based on passive network observation. Information collected goes beyond classic server vulnerability assessment, enabling compliance verification of desktop clients.

AB - Detailed and reliable knowledge of the characteristics of an information system is becoming a very important feature for operational security. Unfortunately, vulnerability assessment tools have important side effects on the monitored information systems. In this paper, we propose an approach to gather or deduce information similar to vulnerability assessment reports, based on passive network observation. Information collected goes beyond classic server vulnerability assessment, enabling compliance verification of desktop clients.

U2 - 10.1109/ARES.2006.74

DO - 10.1109/ARES.2006.74

M3 - Conference contribution

AN - SCOPUS:33750945128

SN - 0769525679

SN - 9780769525679

T3 - Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006

SP - 382

EP - 389

BT - Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006

PB - IEEE Computer Society

T2 - 1st International Conference on Availability, Reliability and Security, ARES 2006

Y2 - 20 April 2006 through 22 April 2006

ER -

Improving security management through passive network observation

Résumé

Série de publications

Une conférence

Accès au document

Empreinte digitale

Contient cette citation