TCP portscan detection based on single packet flows and entropy.

Hai ZhangXuyang ZhuWenming Guo
Published in: ICIS (2009)
Keyphrases
  • detection algorithm
  • mutual information
  • end to end
  • automatic detection
  • information theory
  • flow control
  • detection method
  • detection rate
  • false alarms
  • packet loss
  • real time
  • false positives
  • information theoretic