Art

J-GLOBAL ID：201602209803033076   Reference number：16A0106752

A RAT Detection Method Based on Network Behavior of the Communication’s Early Stage

通信の初期段階のネットワーク挙動に基づいたRAT検出方法

Author (2)： JIANG Dan (Fac. of School of Information Sci., Japan Advanced Inst. of Sci. and Technol.) ,  OMOTE Kazumasa (Fac. of School of Information Sci., Japan Advanced Inst. of Sci. and Technol.)
Material： IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences (Web)  (IEICE Trans Fundam Electron Commun Comput Sci (Web))
Volume： E99.A  Issue： 1  Page： 145-153 (J-STAGE)  Publication year： 2016 
JST Material Number： U0466A  ISSN： 1745-1337  Document type： Article
Article type： 原著論文  Country of issue： Japan (JPN)  Language： ENGLISH (EN)

Thesaurus term： *malware ,  aggressive behavior ,  remote monitoring ,  remote control ,  *algorithm ,  cross validation method ,  *network ,  cyberattack ,  *detection algorithm ,  target server attack ,  Mathematics ,  theory of errors
Semi thesaurus term： *RAT ,  *spyware ,  cross validation

JST classification (2)： Computer networks  (JC03000K) ,  Theory of computation  (JB02000A)

Reference (14)：

• [1] ISACA, “Data leak prevention,” http://www.isaca.org, 2010.
• [2] N. Das and T. Sarkar, “Survey on host and network based intrusion detection system,” Int. J. Advanced Networking and Applications, vol.6, no.2, pp.2266-2269, 2014.
• [3] FireEye, “Network Security NX Series,” https://www.fireeye.com /products/nx-network-security-products.html
• [4] D. Jiang and K. Omote, “An approach to detect remote access Trojan in the early stage of communication,” 2015 IEEE 29th International Conference on Advanced Information Networking and Applications, pp.706-713, 2015.
• [5] T. Kocak and I. Kaya, “Low-power bloom filter architecture for deep packet inspection,” IEEE Commun. Lett., vol.10, no.3, pp.210-212, 2006.

Terms in the title (3)： 初期段階 ,  挙動 ,  検出方法