Show simple item record

dc.contributor.authorMartin, Bryan
dc.contributor.authorTummala, Murali
dc.contributor.authorMcEachen, John
dc.date29 January 2018
dc.date.accessioned2019-01-08T18:46:36Z
dc.date.available2019-01-08T18:46:36Z
dc.date.issued2018-01-29
dc.identifier.citationMartin, Bryan, Murali Tummala, and John McEachen. "Multi-homed device detection using clock skew." Signal Processing and Communication Systems (ICSPCS), 2017 11th International Conference on. IEEE, 2017.en_US
dc.identifier.urihttp://hdl.handle.net/10945/60891
dc.descriptionThe article of record as published may be found at http://dx.doi.org/10.1109/ICSPCS.2017.8270453en_US
dc.descriptionPublished in: 2017 11th International Conference on Signal Processing and Communication Systems (ICSPCS)
dc.description.abstractThe aim of this paper was to determine the feasibility of identifying a device connected to the Internet through multiple interfaces (i.e., multi-homed) using the information provided by passively observing network traffic. Since multi-homed hosts allow an alternate means for outside entities to circumvent the security of a firewall and gain access to a network, it is important for a network's security to be able to detect and remove such devices. In this work, the idea of using clock skew - the difference in perceived time between two system clocks - as a unique signature is utilized to identify hosts on a network that are potentially multi-homed. Testing was done on a software-defined network that contained a multi-homed host. After traffic between hosts was collected and processed, analysis of the confidence intervals of the device's clock skew was conducted to determine if IP addresses originating from the same host could be successfully detected solely from network traffic. Results confirmed that the proposed scheme provided a valid means of detecting a multi-homed device on a networken_US
dc.format.extent9 p.en_US
dc.publisherIEEEen_US
dc.rightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.en_US
dc.titleMulti-homed device detection using clock skewen_US
dc.typeArticleen_US
dc.contributor.corporateNaval Postgraduate School (U.S.)en_US
dc.contributor.departmentElectrical and Computer Engineering (ECE)en_US
dc.subject.authorSoftware-defined networken_US
dc.subject.authorMulti-homed hosten_US
dc.subject.authorNetwork monitoringen_US
dc.subject.authorNetwork fingerprintingen_US


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record