Theses and Dissertations
"Why does MPTCP have to make things so complicated?": cross-path NIDS evasion and countermeasures
(Monterey, California: Naval Postgraduate School, 2016-09)
A recent enhancement to Transmission Control Protocol (TCP) is Multipath TCP (TCP), a new transport layer protocol that enhances TCP to be capable of communicating over multiple paths by establishing several "subflow" ...
Distributed emulation in support of large networks
(Monterey, California: Naval Postgraduate School, 2016-06)
Network emulation is a valuable, though potentially resource intensive, method for virtualizing networks for analysis or testing. Though high-powered servers are becoming increasingly accessible, the size and complexity ...
An improved tarpit for network deception
(Monterey, California: Naval Postgraduate School, 2016-03)
Networks are constantly bombarded with malicious or suspicious network traffic by attackers attempting to execute their attack operations. One of the most prevalent types of traffic observed on the network is scanning ...
Crowdsourcing physical network topology mapping with net.Tagger
(Monterey, California: Naval Postgraduate School, 2016-03)
Despite significant research, the challenge of mapping the physical topology of large networks remains a relatively unsolved problem. Although it possesses numerous ramifications for Internet security and resiliency, ...
Correlating inferred data plane IPv6 reboot events with con-trol plane BGP activity
(Monterey, California: Naval Postgraduate School, 2016-03)
We investigate network outages by systematically correlating inferred reboot events from probing the data plane with global routing events in the control plane. We introduce a correlation technique that can be used to ...
Strategies used in capture-the-flag events contributing to team performance
(Monterey, California: Naval Postgraduate School, 2016-03)
Capture-the-flag (CTF) exercises are useful pedagogical tools and have been employed, both formally and informally, by academic institutions. Much like their physical counterparts, cyber CTF exercises hold pedagogical value ...
Detection of active topology probing deception
(Monterey, California: Naval Postgraduate School, 2015-09)
For all purposes and intents, being able to infer the topology of a network is crucial to both operators and adversaries alike. Tracer-oute is a common active probing technique but it may be subverted by deceptive responses. ...
Discovery of IPv6 router interface addresses via heuristic methods
(Monterey, California: Naval Postgraduate School, 2015-09)
With the assignment of the last available blocks of public IPv4 addresses from Internet Assigned Numbers Authority, there is continued pressure for widespread IPv6 adoption. Because the IPv6 address space is orders of ...
Evaluating the limits of network topology inference via virtualized network emulation
(Monterey, California: Naval Postgraduate School, 2015-06)
The Internet measurement community is beset by a lack of ground truth, or knowledge of the real, underlying network in topology inference experiments. While better tools and methodologies can be developed, quantifying the ...
Inferring the presence of reverse proxies through timing analysis
(Monterey, California: Naval Postgraduate School, 2015-06)
This thesis presents a method for inferring the presence of a reverse proxy server using packet timing analysis from the vantage point of a client system. This method can determine whether Internet users are receiving web ...
Refine By:
Advisor
-
Beverly, Robert (60)