Open Access Repository

DynamicWEB: A method for reconnaissance activity profiling


Downloads per month over past year

Scanlan, JD ORCID: 0000-0003-2285-8932, Hartnett, J and Williams, R 2008 , 'DynamicWEB: A method for reconnaissance activity profiling', paper presented at the The 2008 IEEE International Workshop on Cyberspace Safety and Security (CSS2008), 5th December 2008, Sydney, Australia.

[img] PDF
css2008.pdf | Request a copy
Full text restricted
Available under University of Tasmania Standard License.


Port scan correlation aims to differentiate between benign and malicious scans. In this paper we will examine a new method of profiling port scan activity in an attempt to link different source IP addresses to being the same end user. A data mining approach DynamicWEB based upon the COBWEB conceptual clustering algorithm is shown along with some preliminary results of it functioning within the context of scan correlation.

Item Type: Conference or Workshop Item (Paper)
Authors/Creators:Scanlan, JD and Hartnett, J and Williams, R
Related URLs:
Item Statistics: View statistics for this item

Actions (login required)

Item Control Page Item Control Page