- Title
- Quantifying the accuracy of small subnet-equivalent sampling of IPv4 internet background radiation datasets
- Creator
- Chindipha, Stones D
- Creator
- Irwin, Barry V W
- Creator
- Herbert, Alan
- Subject
- To be catalogued
- Date Issued
- 2019
- Date
- 2019
- Type
- text
- Type
- article
- Identifier
- http://hdl.handle.net/10962/430271
- Identifier
- vital:72679
- Identifier
- https://doi.org/10.1145/3351108.3351129
- Description
- Network telescopes have been used for over a decade to aid in identifying threats by gathering unsolicited network traffic. This Internet Background Radiation (IBR) data has proved to be a significant source of intelligence in combating emerging threats on the Internet at large. Traditionally, operation has required a significant contiguous block of IP addresses. Continued operation of such sensors by researchers and adoption by organisations as part of its operation intelligence is becoming a challenge due to the global shortage of IPv4 addresses. The pressure is on to use allocated IP addresses for operational purposes. Future use of IBR collection methods is likely to be limited to smaller IP address pools, which may not be contiguous. This paper offers a first step towards evaluating the feasibility of such small sensors. An evaluation is conducted of the random sampling of various subnet sized equivalents. The accuracy of observable data is compared against a traditional 'small' IPv4 network telescope using a /24 net-block. Results show that for much of the IBR data, sensors consisting of smaller, non-contiguous blocks of addresses are able to achieve high accuracy rates vs. the base case. While the results obtained given the current nature of IBR, it proves the viability for organisations to utilise free IP addresses within their networks for IBR collection and ultimately the production of Threat intelligence.
- Format
- 7 pages
- Format
- Language
- English
- Relation
- Proceedings of the South African Institute of Computer Scientists and Information Technologists 2019
- Relation
- Chindipha, S.D., Irwin, B. and Herbert, A., 2019. Quantifying the accuracy of small subnet-equivalent sampling of IPv4 internet background radiation datasets. In Proceedings of the South African Institute of Computer Scientists and Information Technologists 2019 (pp. 1-8)
- Relation
- Proceedings of the South African Institute of Computer Scientists and Information Technologists 2019 volume 2019 number 1 1 8 2019 978-1-4503-7265-7
- Rights
- Publisher
- Rights
- Use of this resource is governed by the terms and conditions of the ACM Digital Library Statement (https://libraries.acm.org/digital-library/policies#anchor3)
- Hits: 122
- Visitors: 127
- Downloads: 9
Collections
Herbert, Alan (Mr)
Chindipha, Stones Dalitso (Dr)
RU Department of Computer Science
SDG 09. Industry, Innovation and Infrastructure
| Thumbnail | File | Description | Size | Format | |||
|---|---|---|---|---|---|---|---|
| View Details Download | SOURCE1 | Quantifying the accuracy of small subnet-equivalent sampling of IPv4 internet background radiation datasets.pdf | 704 KB | Adobe Acrobat PDF | View Details Download |