Stepping stone detection: Measuring the ssd capability

Abstract

The performance of Stepping Stone Detection (SSD) is measured by the accuracy to detect attacks that were initiated using stepping-stone hosts. The pattern of the attacks needs to be recognized to implement the detection. To evaluate the SSD, a variation of metrics have been used by many researchers but a benchmark should be introduced in calculating the measures. In this paper, we review the approaches used in evaluating the SSD and proposed the beneficial insights metrics in evaluating the effectiveness of SSD.