Distributed port recall (DPR) attacks and its detection

Based on the analysis of DDos attacks in communication and the study of the popular port recall techniques, we found that the harm is more serious when combining them to form a new kind of attacks. A model called distributed port recall attacks is presented in this paper to describe this combination, and some misuse intrusion detection methods based on the records of connections (sessions) and anomaly intrusion detection methods based on the behaviors of users are also proposed. The detection schemes can detect DPR attacks effectively.