Experience Using Active and Passive Mapping for Network Situational Awareness

	This Article
	Subscribers, please Login Purchase article: $19 PDF IEEE Xplore Subscribers RSS feed
	Share
	Email this Article to a friend
	Bibliographic References
	ASCII Text BibTex RefWorks Procite/RefMan/Endnote
	Add to:
	Digg Furl Spurl Blink Simpy Google Del.icio.us Y!MyWeb
	Search
	Similar Articles Articles by Seth Webster Articles by Richard Lippmann Articles by Marc Zissman

Fifth IEEE International Symposium on Network Computing and Applications (NCA'06)

Cambridge, Massachusetts

July 24-July 26

ISBN: 0-7695-2640-3

	ASCII Text	x
	Seth Webster, Richard Lippmann, Marc Zissman, "Experience Using Active and Passive Mapping for Network Situational Awareness," Network Computing and Applications, IEEE International Symposium on, pp. 19-26, Fifth IEEE International Symposium on Network Computing and Applications (NCA'06), 2006.

	BibTex	x
	@article{ 10.1109/NCA.2006.23, author = {Seth Webster and Richard Lippmann and Marc Zissman}, title = {Experience Using Active and Passive Mapping for Network Situational Awareness}, journal ={Network Computing and Applications, IEEE International Symposium on}, volume = {0}, year = {2006}, isbn = {0-7695-2640-3}, pages = {19-26}, doi = {http://doi.ieeecomputersociety.org/10.1109/NCA.2006.23}, publisher = {IEEE Computer Society}, address = {Los Alamitos, CA, USA}, }

	RefWorks Procite/RefMan/Endnote	x
	TY - CONF JO - Network Computing and Applications, IEEE International Symposium on TI - Experience Using Active and Passive Mapping for Network Situational Awareness SN - 0-7695-2640-3 SP19 EP26 A1 - Seth Webster, A1 - Richard Lippmann, A1 - Marc Zissman, PY - 2006 KW - null VL - 0 JA - Network Computing and Applications, IEEE International Symposium on ER -

Seth Webster, MIT, USA

Richard Lippmann, MIT, USA

Marc Zissman, MIT, USA

DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/NCA.2006.23

Passive network mapping has often been proposed as an approach to maintain up-to-date information on networks between active scans. This paper presents a comparison of active and passive mapping on an operational network. On this network, active and passive tools found largely disjoint sets of services and the passive system took weeks to discover the last 15% of active services. Active and passive mapping tools provided different, not complimentary information. Deploying passive mapping on an enterprise network does not reduce the need for timely active scans due to non-overlapping coverage and potentially long discovery times.

Citation:

Seth Webster, Richard Lippmann, Marc Zissman, "Experience Using Active and Passive Mapping for Network Situational Awareness," nca, pp.19-26, Fifth IEEE International Symposium on Network Computing and Applications (NCA'06), 2006

Peer Review Notice | Give Us Feedback

Usage of this product signifies your acceptance of the Terms of Use.