, Cyber Scanning: a Comprehensive Survey, vol.16, p.14961519, 2014.
, Lessons from Stuxnet, Computer, vol.44, issue.4, p.9193, 2011.
The Great Robbery, pp.2016-2017, 2015. ,
, How Dangerous is Internet Scanning? in International Workshop on Trac Monitoring and Analysis, p.158172, 2015.
An Internet-Wide View of Internet-Wide Scanning, 23rd USENIX Security Symposium (USENIX Security), p.6578, 2014. ,
An Experimental Evaluation to Determine if Port Scans are Precursors to an Attack, Proceedings of the International Conference on Dependable Systems and Networks (DSN), p.602611, 2005. ,
Network Forensic System for Port Scanning Attack, Advance Computing Conference (IACC), p.310315, 2010. ,
A Time Series Approach for Inferring Orchestrated Probing Campaigns by Analyzing Darknet Trac, 10th International Conference on Availability, Reliability and Security, p.180185, 2015. ,
Remote Identication of Port Scan Toolchains, 8th IFIP International Conference on New Technologies, Mobility and Security (NTMS) ,
, IEEE, p.15, 2016.
A Study on Advanced Persistent Threats, in Communications and Multimedia Security, ser. Lecture Notes in Computer Science, vol.8735, 2014. ,
,
Knowledge Discovery of Port Scans from Darknet, Symposium on Integrated Network and Service Management, p.935940, 2017. ,
URL : https://hal.archives-ouvertes.fr/hal-01636215
Towards a Taxonomy of Network Scanning Techniques, Proceedings of the 2008 annual research conference of the South African Institute of Computer Scientists and Information Technologists on IT research in developing countries: riding the wave of technology, p.17, 2008. ,
, On Fingerprinting Probing Activities, vol.43, p.3548, 2014.
, Proling Internet Scanners: Spatial and Temporal Structures, 2016.
, ACM SIGCOMM Computer Communication Review, vol.29, issue.2, p.4148, 1999.
A Brief History of Scanning, Proceedings of the 7th ACM SIGCOMM conference on Internet measurement, p.7782, 2007. ,
Demystifying Internet-Wide Service Discovery, IEEE/ACM Transactions on Networking, vol.21, issue.6, p.17601773, 2013. ,
Coordinated Scan Detection, NDSS, 2009. ,
Exact Modeling of Propagation for PermutationScanning Worms, INFOCOM 2008. The 27th Conference on Computer Communications, p.16961704, 2008. ,
, ZMap: Fast Internet-Wide Scanning and its Security Applications. in Usenix Security, 2013.
, NMap Network Scanning: The Ocial NMap Project Guide to Network Discovery and Security Scanning. Insecure, 2009.
, Nmap In The Movies, pp.2018-2027
, , pp.2018-2027
, , pp.2018-2027
Evaluation of the Ability of the Shodan Search Engine to Identify Internet-Facing Industrial Control Devices, International Journal of Critical Infrastructure Protection, vol.7, issue.2, p.114123, 2014. ,
Cyber Search Engine Shodan Exposes Industrial Control Systems to new Risks, The Washington Post, 2012. ,
, The Scariest Search Engine on the Internet, CNN Tech, 2013.
GrIDS -A Graph Based Intrusion Detection System for Large Networks, Proceedings of the 19th national information systems security conference, vol.1, p.361370, 1996. ,
Surveying Port Scans and their Detection Methodologies, The Computer Journal, vol.54, issue.10, p.15651581, 2011. ,
A Real-Time Intrusion Detection System (IDS) for Large Scale Networks and its Evaluations, IEICE Transactions on Ccommunications, vol.82, issue.11, p.18171825, 1999. ,
Live Trac Analysis of TCP/IP Gateways, NDSS, 1998. ,
A Probabilistic Approach to Detecting Network Scans, Network Operations and Management Symposium, p.359372, 2002. ,
Surveillance Detection in High Bandwidth Environments, DARPA Information Survivability Conference and Exposition, 2003. Proceedings, vol.1, p.130138, 2003. ,
Detection of Novel Network Attacks using Data Mining, Proc. of Workshop on Data Mining for Computer Security. Citeseer, 2003. ,
Detecting Network Portscans through Anomoly Detection, Sensor Fusion, and Target Recognition XIII, vol.5429, p.254264, 2004. ,
Detection of Portscans Using IP Header Data, Proceedings of TBRC'05, 2005. ,
Scan Detection on very Large Networks using Logistic Regression Modeling, 11th IEEE Symposium on Computers and Communications, p.402408, 2006. ,
Scan Detection: A Data Mining Approach, Proceedings of the 2006 SIAM International Conference on Data Mining ,
, , p.118129, 2006.
Snort: Lightweight Intrusion Detection for Networks, Lisa, vol.99, issue.1, p.229238, 1999. ,
Reconnaissance Scan Detection Heuristics to Disrupt the Pre-Attack Information Gathering, International Conference on Network and Service Security, N2S, p.15, 2009. ,
A Network Security Monitor, Computer Society Symposium on Research in Security and Privacy, p.296304, 1990. ,
A System for Detecting Network Intruders in Real-Time, Computer Networks, vol.31, issue.23-24, p.24352463, 1999. ,
The OSU Flowtools Package and CISCO NetFlow Logs, Proceedings of the 2000 USENIX LISA Conference, 2000. ,
Fast Portscan Detection Using Sequential Hypothesis Testing, Symposium on Security and Privacy, p.211225, 2004. ,
Scalable Double Filter Structure for Port Scan Detection, International Conference on Communications, ICC, vol.5, p.21772182, 2006. ,
A Novel Approach to Scan Detection on the Backbone, Sixth International Conference on Information Technology: New Generations, ITNG, p.1621, 2009. ,
Connectionless Port Scan Detection on the Backbone, 25th IEEE International Performance, Computing, and Communications Conference, p.10, 2006. ,
Detecting Low-Prole Probes and Novel Denial-of-Service Attacks, Proceedings of the 2001 IEEE Workshop on Information Assurance, 2001. ,
Improved Detection of Low-Prole Probe and Denial-of-Service Attacks, Proceedings of the 2001 Workshop on Statistical and Machine Learning Techniques in Computer Intrusion Detection, 2001. ,
On Detecting Port Scanning Using Fuzzy Based Intrusion Detection System, International Wireless Communications and Mobile Computing Conference, IWCMC, p.105110, 2008. ,
DOI : 10.1109/iwcmc.2008.19
URL : http://www.aloul.net/Papers/faloul_iwcmc08.pdf
Network Trac Analysis Using Rened Bayesian Reasoning to Detect Flooding and Port Scan Attacks, International Conference on Advanced Computer Theory and Engineering, p.10001004, 2008. ,
DOI : 10.1109/icacte.2008.44
A Comparative Study of Fuzzy Inference Systems, Neural Networks and Adaptive Neuro Fuzzy Inference Systems for Portscan Detection, Workshops on Applications of Evolutionary Computation, p.5261, 2008. ,
PHAD: Ppacket Header Anomaly Detection for Identifying Hostile Network Trac, 2001. ,
A Slow Port Scan Attack Detection Mechanism Based on Fuzzy Logic and a Stepwise Policy, 2008. ,
Passive Visual Fingerprinting of Network Attack Tools, Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, p.4554, 2004. ,
NVisionIP: Netow Visualizations of System State for Security Situational Awareness, Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, p.6572, 2004. ,
Visualizing Network Data for Intrusion Detection, Information Assurance Workshop, 2005. IAW'05. Proceedings from the Sixth Annual IEEE SMC, p.100108, 2005. ,
DOI : 10.1109/iaw.2005.1495940
URL : http://www.rumint.org/gregconti/publications/20050423_IAW_Abdullah(final).pdf
Searching for Open Windows and Unlocked Doors: Port Scanning in Large-Scale Commodity Clusters, Cluster Computing and the Grid, vol.1, p.146151, 2005. ,
Portvis: a Tool for Port-Based Detection of Security Events, Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, p.7381, 2004. ,
Interactive Visualization for Network and Port Scan Detection, International Workshop on Recent Advances in Intrusion Detection ,
DOI : 10.1007/11663812_14
Visualising Communication Network Security Aattacks, Information Visualization, 2007. IV'07. 11th International Conference, p.726733, 2007. ,
DOI : 10.1109/iv.2007.149
A Novel Visualization Approach for Ecient Network Scans Detection, Security Technology, 2008. SECTECH'08. International Conference on, p.2326, 2008. ,
DOI : 10.1109/sectech.2008.47
Co-ordinated Port Scans: a Model, a Detector and an Evaluation Methodology, 2006. ,
Network Scanning Detection Strategies for Enterprise Networks, 2008. ,
DOI : 10.22215/etd/2008-06485
URL : https://curve.carleton.ca/system/files/etd/eb3268a2-7f48-4f9b-bd52-55de936ebf09/etd_pdf/2c19c9a4946fc5fe45f9a61c59569b4a/whyte-networkscanningdetectionstrategiesforenterprise.pdf
Practical Automated Detection of Stealthy Portscans, Journal of Computer Security, vol.10, issue.1-2, p.105136, 2002. ,
DOI : 10.3233/jcs-2002-101-205
Internet Intrusions: Global Characteristics and Prevalence, ACM SIGMETRICS Performance Evaluation Review, vol.31, issue.1, p.138147, 2003. ,
A Methodology for Using Intelligent Agents to Provide Automated Intrusion Response, Proceedings of the IEEE Systems, Man, and Cybernetics Information Assurance and Security Workshop, p.110116, 2000. ,
Scan attack detection based on distributed cooperative model, Computer Supported Cooperative Work in Design, p.743748, 2008. ,
A Tutorial on Hidden Markov Models and Selected Applications in Speech Recognition, Proceedings of the IEEE, vol.77, issue.2, p.257286, 1989. ,
An Introduction to Hidden Markov Models, Acoustic, Speech and Signal Processing, vol.3, issue.1, p.416, 1986. ,
Hidden Markov Models for Time Series: an Introduction using R, ser. Monographs on statistics and applied probability, 2009. ,
Unsupervised Learning of Finite Mixture Models, IEEE Transactions on pattern analysis and machine intelligence, vol.24, issue.3, p.381396, 2002. ,
A New Look at the Statistical Model Identication, IEEE transactions on automatic control, vol.19, issue.6, p.716723, 1974. ,
Estimating the Dimension of a Model, The annals of statistics, vol.6, issue.2, p.461464, 1978. ,
Hidden Markov Models Fundamentals, Lecture Notes, 2007. ,
Hidden Markov Models and the Baum-Welch Algorithm, Newsletter of the IEEE Information Theory Society, vol.53, issue.4, 2003. ,
, Darknet as a Source of Ccyber Intelligence: Survey, Taxonomy, and Characterization, vol.18, p.11971227, 2016.
, A Model of Analyzing Cyber Threats Trend and Tracing Potential Attackers Based on Darknet Trac, Security and Communication Networks, vol.7, p.16121621, 2014.
Modeling of IP Scanning Activities with Hidden Markov Models: Darknet Case Study, 8th IFIP International Conference on New Technologies, Mobility and Security (NTMS), p.15, 2016. ,
URL : https://hal.archives-ouvertes.fr/hal-01404127
Honeynet-Based Botnet Scan Trac Analysis, in Botnet Detection, p.2544, 2008. ,
Internet-Wide Scanners Classication using Gaussian Mixture and Hidden Markov Models, New Technologies, Mobility and Security (NTMS), p.15, 2018. ,
The Accuracy of the Gaussian Approximation to the Sum of Independent Variates, Transactions of the American Mathematical Society, vol.49, issue.1, p.122136, 1941. ,
A Density-Based Algorithm for Discovering Clusters in Large Spatial Databases with Noise, Kdd, vol.96, issue.34, p.226231, 1996. ,
Identifying Coordination of Network Scans Using Probed Address Structure, 8th International Workshop on Trac Monitoring and Analysis, TMA 2016, 2016. ,