barns.blog

It has been a while since I commented about anything that I am doing at the moment. This has mainly because I have been altogether too busy to write anything.

In a previous post I commented on how I almost worked myself to death in pursuit of submitting a half-decent paper to SAICSIT for their 2008 conference. Well, I was fairly happy with the submission that I did make, and so it was very rewarding to have it accepted.

Hannah, Colin and I will be attending SAICSIT later in the year and will get the opportunity to present our work at that forum. What was rewarding for this paper is that not only will it be indexed by the ACM, the comments on the proposed taxonomy were in agreement. This gives some credability to the process that I am currently taking in the development of my Scan-Detection engine.

Here comes October…

Well, I have finally submitted my SAICSIT paper. It was a very long process, which nearly killed me. On Friday at 11am we decided to change track entirely and with the deadline on Monday at 2pm.

Its now completed under its new title, “Towards a Taxonomy of Network Scanning Techniques”

Abstract:

Network scanning is a common reconnaissance activity in network intrusion. Despite this, it’s classifcation remains vague and detection systems in current Network Intrusion Detection Systems are incapable of detecting many forms of scanning traffic.

This paper presents a classifcation of network scanning and illustrates how complex and varied this activity is. The presented classifcation extends previous, well known, definitions of scanning traffic in a manner which refects this complexity.