The development of a database taxonomy of vulnerabilities to support the study of denial of service attacks

摘要: As computer networks continue to proliferate, the world's dependence on a secure communication infrastructure is of prime importance. Disruption service through Denial Service (DoS) attacks can result in great financial loss for Internet-based companies and major inconveniences users Internet services. The purpose this two-year study was understand network denial so that methods may be developed detect prevent them. Initially, researcher constructed database system exploits revealed underlying vulnerabilities software or protocols they attack. populated with posted at popular reporting sites such as Rootshell, Bugtraq, Security Focus. To encourage use common vulnerability taxonomy facilitate sharing data, parts classification scheme proposed by Krsul (1998) his research were included, well developing tree based current research. Sifting reports categorizing has been challenging experience; creating categories are unambiguous, repeatable, exhaustive proven difficult task. results two three useful vulnerabilities. next phase project look any clustering these categories, determine if effective countermeasures deployed against Although past history no guarantee future exploit activity, it hoped 630 will remain valid DoS attacks. Toward goal, made data mining packages plot various interrelationships could more easily discovered studied. A sampling plots, an interpretation plotted part creation presented