|
|
Type of Document Dissertation Author Mano, Chad D. URN etd-08312006-162907 Title Defending against Malicious Rogue System Threats Degree Doctor of Philosophy Department Computer Science and Engineering Advisory Committee
Advisor Name Title Aaron Striegel Committee Chair Christian Poellabauer Committee Member Douglas Thain Committee Member Surendar Chandra Committee Member Keywords
- computer security
- network security
- encryption
- wireless security
- communication protocols
Date of Defense 2006-08-18 Availability restricted Abstract With the expanse of the Internet and the increased reliance on computer networking technology for everyday business, the need to protect electronic data and communication from malicious attack has become increasingly critical. This dissertation addresses the rogue system problem, a significant threat in modern networks. A rogue system is a device installed within a network without the authorization or knowledge of network administrators, which is typically engaged in unauthorized activities. These systems pose a major threat to network data and resources, potentially resulting in the exposure of sensitive information or network performance degradation. This dissertation presents analysis and solutions for rogue system threats within a cooperative distributed network environment and within various types of wireless environments. In addition, a tool is presented which enables high speed network packet logging, for the purpose of rogue system detection, using inexpensive equipment in a scalable distributed storage infrastructure.
The major contributions of this dissertation are as follows. The development of a secure communication protocol which protects a distributed network from potential rogue system attacks while enabling the implementation of bandwidth conservation techniques for efficiency. An important enhancement of a standard wireless communication protocol for the purpose of preventing both insider and outsider rogue eavesdropping attacks. A novel packet payload slicing technique for the purpose of detecting rogue wireless access points within a corporate network environment. An analysis of the potential of host-based rogue wireless man-in-the-middle attack detection. The development of a tool for high speed traffic analysis to aid in rogue system detection.
Rogue system threats will continue to grow as networks become more complex and new attack techniques evolve to better evade detection. The future direction of this work includes applying these techniques to newly identified threats for the purpose of gauging the effectiveness of the proposed methods and to aid in discovering new means of defending against rogue system attacks. In addition, rogue threats in less traditional types of network environments, such as peer-to-peer and personal area networks, will be addressed in order to provide protection from all means of electronic rogue system attacks.
Files
Filename Size Approximate Download Time (Hours:Minutes:Seconds)
28.8 Modem 56K Modem ISDN (64 Kb) ISDN (128 Kb) Higher-speed Access ManoCD082006.pdf 2.71 Mb 00:12:31 00:06:26 00:05:38 00:02:49 00:00:14 indicates that a file or directory is accessible from the campus network only.