Abstract:Constructing an effective scan monitoring system is a necessary step for early detection and warning of unknown threats. Scan monitoring systems constructed by routable unused IP addresses will be more effective than those deployed in active networks for their special advantages in identifying threats precisely which results in low false alarm rate. Nowadays systematic researches on how to deploy such an effective monitoring system are still missing. This paper presents a novel scan monitoring model based on BGP route distribution to answer two practical deployment questions. One is how to design and deploy an ideal target-specified scan monitoring system and the other is how to evaluate the detecting effectiveness of actual limited deploying resources. On the basis of the model, this paper puts forward a new concept of deployment threshold which describes the most economical matching value between the monitoring system’s scale and the scanner’s scanning width on the same detection probability demand. According to the model and the deployment threshold, an effective monitoring system can be designed and appropriate detecting targets can be proposed which match the practical deploying resources to avoid blind deployment as before. Simulation results are coincident with the theretical analyses.

Research on Distributed Resource Security Monitor System Model

Research on Information Security Model and Security System Design

Research of United Platform of Network Security Management Model

Modeling and Defending Advanced Metering Infrastructure Subjected to Distributed Denial-of-Service Attacks

Design of risk monitoring and prediction system for resource security management.

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

A Generalized Information Security Model SOCMD for CMD Systems

Modelization and analysis of dynamic heterogeneous redundant system

Design and Implementation of Distributed Intrusion Detection System Based on P2DR Model

Research on Key Issues of Computer Security Monitor System

Design and Simulation of Intrusion Detection Based on DSR Protocol

Dynamic Defense Security Model for Network Perimeter

On Modeling and Deploying an Effective Scan Monitoring System

Mobile Agent Based Distributed Intrusion Detection System Model Protecting from Attack

Research on Computer Network Security Analysis Model

Research on distributed intrusion detection system based on Protocol analysis

An Active Network Security Risk Management System

VDS : Malware Detection System

Modeling defensive resource allocation in multilayered systems under probabilistic and strategic risks

Analysis Method of Security Critical Components of Industrial Cyber Physical System Based on SysML.

A New Model of Security for Distributed Systems