Theses and Dissertations
"Why does MPTCP have to make things so complicated?": cross-path NIDS evasion and countermeasures
(Monterey, California: Naval Postgraduate School, 2016-09)
A recent enhancement to Transmission Control Protocol (TCP) is Multipath TCP (TCP), a new transport layer protocol that enhances TCP to be capable of communicating over multiple paths by establishing several "subflow" ...
Inferring the presence of reverse proxies through timing analysis
(Monterey, California: Naval Postgraduate School, 2015-06)
This thesis presents a method for inferring the presence of a reverse proxy server using packet timing analysis from the vantage point of a client system. This method can determine whether Internet users are receiving web ...
Methods for intelligent mapping of the IPv6 address space
(Monterey, California: Naval Postgraduate School, 2015-03)
Due to the rapid growth of the Internet, the available pool of unique addresses in version four of the Internet Protocol (IPv4) is nearly depleted. As a result, the next generation protocol, IPv6, is now widely implemented ...
IP infrastructure geolocation
(Monterey, California: Naval Postgraduate School, 2015-03)
Physical network maps are important to critical infrastructure defense and planning. Current state-of-the-art network infrastructure geolocation relies on Domain Name System (DNS) inferences. However, not only is using ...
Toward a robust method of presenting a rich, interconnected deceptive network topology
(Monterey, California: Naval Postgraduate School, 2015-03)
Every day, adversaries bombard Department of Defense computer networks with scanning traffic in order to gather information about the target network. This reconnaissance is typically a precursor to attacks designed to ...
Creating profiles from user network behavior
(Monterey, California: Naval Postgraduate School, 2013-09)
The ability to identify network users based on their network behavior has both positive and negative implications. If users are tracked
on the Internet without their knowledge or permission, this could be interpreted as ...
Fingerprinting reverse proxies using timing analysis of TCP flows
(Monterey, California: Naval Postgraduate School, 2013-09)
Reverse proxy servers are valuable assets to defend outside hosts from seeing the internal network structure upon which the reverse proxy is serving. They are frequently used to protect valuable files, systems, and internal ...
IPV6 alias resolution via induced router fragmentation
(Monterey, California: Naval Postgraduate School, 2013-06)
IPv4 addresses are a scarce resource with available allocations nearing exhaustion. DoD and government agencies were mandated to transition to IPv6 for greater security and flexibility. The transition to IPv6 faces a series ...
MalWebID_Autodetection and Identification of Malicious Web Hosts Through Live Traffic Analysis
(Monterey, California. Naval Postgraduate School, 2013-03)
This thesis investigates the ability for recently devised packet-level Transmission Control Protocols (TCP) transport classifiers to discover abusive traffic flows, especially those not found via traditional methods, e.g., ...
Secure mobile distributed file system (MDFS)
(Monterey, California. Naval Postgraduate School, 2011-03)
The goal of this research is to provide a way for frontline troops to securely store and exchange sensitive information on a network of mobile devices with resiliency. The first portion of the thesis is the design of a ...
Refine By:
Advisor
-
Beverly, Robert (10)
-
Xie, Geoffrey (10)