Detailed Information on Publication Record

@inproceedings{29528,
   author = {Velan, Petr and Husák, Martin and Tovarňák, Daniel},
   address = {Taipei, Taiwan},
   booktitle = {NOMS 2018 - 2018 IEEE/IFIP Network Operations and Management Symposium},
   doi = {http://dx.doi.org/10.1109/NOMS.2018.8406121},
   keywords = {Databases;Engines;Force;IP networks;Monitoring;Security;Uniform resource locators},
   howpublished = {elektronická verze "online"},
   language = {eng},
   location = {Taipei, Taiwan},
   isbn = {978-1-5386-3416-5},
   pages = {1-3},
   publisher = {IEEE Xplore Digital Library},
   title = {Rapid Prototyping of Flow-Based Detection Methods Using Complex Event Processing},
   url = {https://ieeexplore.ieee.org/document/8406121},
   year = {2018}
}

TY  - JOUR
ID  - 29528
AU  - Velan, Petr - Husák, Martin - Tovarňák, Daniel
PY  - 2018
TI  - Rapid Prototyping of Flow-Based Detection Methods Using Complex Event Processing
PB  - IEEE Xplore Digital Library
CY  - Taipei, Taiwan
SN  - 9781538634165
KW  - Databases;Engines;Force;IP networks;Monitoring;Security;Uniform resource locators
UR  - https://ieeexplore.ieee.org/document/8406121
N2  - Detection of network attacks is the first step to network security. Many different methods for attack detection were proposed in the past. However, descriptions of these methods are often not complete and it is difficult to verify that the actual implementation matches the description. In this demo paper, we propose to use Complex Event Processing (CEP) for developing detection methods based on network flows. By writing the detection methods in an Event Processing Language (EPL), we can address the above-mentioned problems. The SQL-like syntax of most EPLs is easily readable so the detection method is self-documented. Moreover, it is directly executable in the CEP system, which eliminates inconsistencies between documentation and implementation. The demo will show a running example of a multi-stage HTTP brute force attack detection using Esper and its EPL.
ER  - 

VELAN, Petr, Martin HUSÁK and Daniel TOVARŇÁK. Rapid Prototyping of Flow-Based Detection Methods Using Complex Event Processing. Online. In \textit{NOMS 2018 - 2018 IEEE/IFIP Network Operations and Management Symposium}. Taipei, Taiwan: IEEE Xplore Digital Library, 2018, p.~1-3. ISBN~978-1-5386-3416-5. Available from: https://dx.doi.org/10.1109/NOMS.2018.8406121.