Detecting Cyber Attacks at Data Dribble

Abstract

This research article proposes a new technique for detecting unauthorized network intrusions, based on a traffic flow model and Cisco NetFlow protocol application [1,2]. This technique allows us to detect the most common types of network attack (DDoS and port scanning) and most importantly make a list of IP-addresses of trespassers. So, the technique can be used in intrusion detection systems, and in those systems which can track and lock these IP-addresses.

Keywords: Network Attacks, Intrusion Detection, IP Address of Trespassers, DDoS attack, Cisco NetFlow, flow traffic model.