Proceedings of the 3rd European Conference on Computer Network Defense

1. Front Matter

   Pages I-XI

   PDF

2. Tales from the Crypt: Fingerprinting Attacks on Encrypted Channels by Way of Retainting

   • Michael Valkering, Asia Slowinska, Herbert Bos

   Pages 1-20

3. Towards High Assurance Networks of Virtual Machines

   • Fabrizio Baiardi, Daniele Sgandurra

   Pages 21-34

4. Intrusion Detection Using Cost-Sensitive Classification

   • Aikaterini Mitrokotsa*, Christos Dimitrakakis, Christos Douligeris

   Pages 35-47

5. A Novel Approach for Anomaly Detection over High-Speed Networks

   • Osman Salem, Sandrine Vaton, Annie Gravey

   Pages 49-68

6. Elastic Block Ciphers in Practice: Constructions and Modes of Encryption

   • Debra L. Cook*, Moti Yung, Angelos D. Keromytis

   Pages 69-91

7. Vulnerability Response Decision Assistance

   • Hal Burch, Art Manion, Yurie Ito

   Pages 93-105

8. Alice, What Did You Do Last Time? Fighting Phishing Using Past Activity Tests

   • Nikos Nikiforakis, Andreas Makridakis, Elias Athanasopoulos, Evangelos P. Markatos

   Pages 107-117

9. QuiGon: The First Tool Against Clone Attack on Internet Relay Chat

   • Thibaut Henin, Corinne Huguennet

   Pages 119-129

10. Defending Against Next Generation Through Network/Endpoint Collaboration and Interaction

    • Spiros Antonatos, Michael Locasto, Stelios Sidiroglou, Angelos D. Keromytis, Evangelos Markatos

    Pages 131-141

11. ISi-LANA – A Secure Basic Architecture for Networks Connected to the Internet

    • Thomas Haeberlen

    Pages 143-151

12. Back Matter

    Pages 153-160

    PDF

The 3rd European Conference on Computer Network Defense took place in September 2007 at Aldemar Hotel, in Heraklion, Crete, Greece in cooperation with the European Network and Information Security Agency (ENISA). The theme of the conference was the protection of computer networks. The conference drew participants from academia and industry in Europe and beyond to discuss hot topics in applied network and systems security. The conference was a great success, with 6 refereed papers and 6 invited presentations on topics ranging from high assurance networks of virtual machines to signaling vulnerabilities in wiretapping systems. This book contains the refereed as well as refereed papers. We are greatful to the authors and presenters for their contributions, as well as the participants of EC2N’07 for making the conference a success. We are looking forward to a successful EC2ND event in 2008. K. G. Anagnostakis, S. Ioannidis, V. Siris Contents 1 Tales from the Crypt: Fingerprinting Attacks on Encrypted Channels by Way of Retainting ........................................1 Michael Valkering, Asia Slowinska, and Herbert Bos 1 Introduction ......................................................................................... 1 2 Architecture ......................................................................................... 3 2.1 Tracking Issues .............................................................................. 4 2.2 Retainting ...................................................................................... 6 2.2.1 Determining the Tag ............................................................. 6 2.2.2 Identifying the SSL Conversation ........................................ 8 2.3 Interposition Details...................................................................... 9 3 Signature Generation ........................................................................... 9 3.1 Pattern-Based Signatures ............................................................. 10 3.2 Signatures for Polymorphic Buffer Overflows ............................ 13 4 Filters ................................................................................................. 14 5 Results ............................................................................................... 15 6 Related Work ..................................................................................... 17 7 Conclusions ....................................................................................... 18 References ............................................................................................ 18 2 Towards High Assurance Networks of Virtual Machines...............21

• Denial-of-Service
• EC2ND
• Intrustion Detection
• Network Monitoring
• Network Security
• data security
• information
• monitor

• Inst. Computer Science, Foundation for Research & Technology, Hellas, Iraklion, Greece

  Vasilios Siris, Kostas Anagnostakis, Sotiris Ioannidis

• European Network & Information Security Agency (ENISA), Iraklion, Greece

  Panagiotis Trimintzios

Policies and ethics