Paper published in a journal (Scientific congresses, symposiums and conference proceedings)
ASMATRA: Ranking ASs Providing Transit Service to Malware Hosters
Wagner, Cynthia; François, Jérôme; State, Radu et al.
2013In IFIP/IEEE International Symposium on Integrated Network Management IM2013, p. 1-9
Peer reviewed
 

Files


Full Text
06572994.pdf
Publisher postprint (519.37 kB)
Request a copy

All documents in ORBilu are protected by a user license.

Send to



Details



Keywords :
DNS; AS graphs; BGP Ranking; PageRank algorithm
Abstract :
[en] The Internet has grown into an enormous network offering a variety of services, which are spread over a multitude of domains. BGP-routing and Autonomous Systems (AS) are the key components for maintaining high connectivity in the Internet. Unfortunately, Internet Service Providers (ISPs) operating ASs do not only host normal users and content, but also malicious content used by attackers for spreading malware, hosting phishing web-sites or performing any kind of fraudulent activity. Practical analysis shows that such malware-providing ASs prevent themselves from being de-peered by hiding behind other ASs, which do not host the malware themselves but simply provide transit service for malware. This paper presents a new method for detecting ASs that provide transit service for malware hosters, without being malicious themselves. A formal definition of the problem and the metrics are determined by using the AS graph. The PageRank algorithm is applied to improve the scalability and the completeness of the approach. The method is assessed on real and publicly available datasets, showing promising results.
Disciplines :
Computer science
Identifiers :
UNILU:UL-CONFERENCE-2012-463
Author, co-author :
Wagner, Cynthia ;  University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC)
François, Jérôme ;  University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)
State, Radu  ;  Computer Incident Response Center Luxembourg, Luxembourg
Dulaunoy, Alexandre ;  University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) ; University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)
Engel, Thomas ;  University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC)
Massen, Gilles
External co-authors :
no
Language :
English
Title :
ASMATRA: Ranking ASs Providing Transit Service to Malware Hosters
Publication date :
2013
Event name :
IFIP/IEEE International Symposium on Integrated Network Management IM2013
Event place :
Ghent, Belgium
Event date :
27-31 May 2013
Audience :
International
Journal title :
IFIP/IEEE International Symposium on Integrated Network Management IM2013
Publisher :
IEEE
Pages :
1-9
Peer reviewed :
Peer reviewed
Available on ORBilu :
since 19 September 2016

Statistics


Number of views
99 (1 by Unilu)
Number of downloads
0 (0 by Unilu)

Scopus citations®
 
14
Scopus citations®
without self-citations
13
WoS citations
 
8

Bibliography


Similar publications



Contact ORBilu