Internet background radiation arrival density and network telescope sampling strategies

Pemberton, Dean; Komisarczuk, Peter; Welch, Ian

doi:10.1109/atnac.2007.4665254

Cited by 12 publications

(15 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…IBR [3] and client honeypot [1,2] Internet instruments are being developed at Victoria University and the NGN VOIP quality monitoring concept has been simulated [16]. These are examples of Internet Grid instruments that could be used to capture network information for improving the Internet experience for users and Service Providers (SP) through detection, data analysis to diagnose and prevent malicious activity such as denial-of-service or intrusions.…”

Section: Example Geii Instrumentsmentioning

confidence: 99%

“…Our initial framework uses two experimental Internet instruments as the basis for implementation and validation of the approach. These prototype instruments being developed at Victoria University scan for malicious Internet content/servers [1,2] using a client honeypot architecture that can be Grid deployed and capture and analyse Internet Background Radiation (IBR) using network telescopes and a Grid based analysis engine for traffic analysis computation [3]. The network telescope is shown in Figure 1 and the client honeypot in Figure 4.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Grid Enabled Internet Instruments

Komisarczuk

Seifert

Pemberton

2007

IEEE GLOBECOM 2007-2007 IEEE Global Telecommunications Conference

Self Cite

View full text Add to dashboard Cite

Ian.Welch Christian.Seifert Dean.Pemberton} @mcs.vuw.ac.nz This paper introduces the Grid Enabled Internet Instrument concept and discusses instruments that are being developed at Victoria University to measure Internet quality. The first instrument is a Grid version of the network telescope for studying Internet Background Radiation (IBR) and the second is a hybrid client honeypot system using high and low interaction devices for scanning the web for malicious content and servers. A third instrument on VOIP quality has been approached through simulation. The GEII framework is a work in progress and the initial design is introduced in this paper as the basis of a new Grid of Internet sensors that could be deployed to improve Internet measurement and gain a global insight to Internet quality.

show abstract

Section: Example Geii Instrumentsmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Grid Enabled Internet Instruments

Komisarczuk

Seifert

Pemberton

2007

IEEE GLOBECOM 2007-2007 IEEE Global Telecommunications Conference

Self Cite

View full text Add to dashboard Cite

show abstract

“…3. Grid node processing time (seconds) for 100MB PCAP traces Previously we identified the non uniformity of data hitting the network telescope from an address range perspective and identified the data sampling strategy that would be best employed to estimate the IBR hitting a larger address space [48,49]. Here we outline other aspects of the dataset such as typical attack trends detected.…”

Section: Fig 2 Network Telescope Setup and Grid Analysis Enginementioning

confidence: 99%

“…using the statistical package R. Our experiment developed some Grid based solutions that distribute data amongst a set of nodes using the "bag of jobs" paradigm, shown in Figure 2. Data is stored in the pcap format and our base analysis software (pacpstat), extracts core data [48]. Data is concatenated into 100MByte files to be processed and pcapstat was statically compiled to overcome issues with deployment on the Grid (availability of libtrace library).…”

Section: Fig 2 Network Telescope Setup and Grid Analysis Enginementioning

confidence: 99%

See 1 more Smart Citation

Internet Sensor Grid: Experiences with Passive and Active Instruments

Komisarczuk

Welch

2010

Communications: Wireless in Developing Countries and Networks of the Future

Self Cite

View full text Add to dashboard Cite

Abstract. The Internet is constantly evolving with new emergent behaviours arising; some of them malicious. This paper discusses opportunities and research direction in an Internet sensor grid for malicious behaviour detection, analysis and countermeasures. We use two example sensors as a basis; firstly the honeyclient for malicious server and content identification (i.e. drive-bydownloads, the most prevalent attack vector for client systems) and secondly the network telescope for Internet Background Radiation detection (IBRwhich is classified as unsolicited, non-productive traffic that traverses the Internet, often malicious in nature or origin). Large amounts of security data can be collected from such sensors for analysis and federating honeyclient and telescope data provides a worldwide picture of attacks that could enable the provision of countermeasures. In this paper we outline some experiences with these sensors and analyzing network telescope data through Grid computing as part of an "intelligence layer" within the Internet.

show abstract