- Title
- Deep Routing Simulation
- Creator
- Irwin, Barry V W
- Creator
- Herbert, Alan
- Subject
- To be catalogued
- Date Issued
- 2013
- Date
- 2013
- Type
- text
- Type
- article
- Identifier
- http://hdl.handle.net/10962/430353
- Identifier
- vital:72685
- Identifier
- https://www.academic-bookshop.com/ourshop/prod_2546879-ICIW-2013-8th-International-Conference-on-Information-Warfare-and-Security.html
- Description
- This paper discusses a dataset of some 16 million packets targeting port 445/tcp collected by a network telescope utilising a /24 netblock in South African IP address space. An initial overview of the collected data is provided. This is followed by a detailed analysis of the packet characteristics observed, including size and TTL. The peculiarities of the observed target selection and the results of the flaw in the Conficker worm's propagation algorithm are presented. An analysis of the 4 million observed source hosts is reported, grouped by both packet counts and the number of distinct hosts per network address block. Address blocks of size /8, 16 and 24 are used for groupings. The localisation, by geographic region and numerical proximity, of high ranking aggregate netblocks is highlighted. The observed shift in geopolitical origins observed during the evolution of the Conficker worm is also discussed. The paper concludes with some overall analyses, and consideration of the application of network telescopes to the monitoring of such outbreaks in the future.
- Format
- 6 pages
- Format
- Language
- English
- Relation
- International Conference on Information Warfare and Security: ICIW
- Relation
- Irwin, B. and Herbert, A., 2013, March. Deep Routing Simulation. In ICIW 2013 Proceedings of the 8th International Conference on Information Warfare and Security: ICIW 2013 (p. 97). Academic Conferences Limited
- Relation
- International Conference on Information Warfare and Security: ICIW volume 2013 number 1 1 7 2015 2048 9889
- Rights
- Publisher
- Rights
- Use of this resource is governed by the terms and conditions of the International Conference on Information Warfare and Security ICIW Statement (https://www.informs.org/Meetings-Conferences/INFORMS-Conference-Calendar/Past-Events/International-Conference-on-Information-Warfare-and-Security)
- Hits: 88
- Visitors: 90
- Downloads: 3
Thumbnail | File | Description | Size | Format | |||
---|---|---|---|---|---|---|---|
View Details Download | SOURCE1 | Deep Routing Simulation.pdf | 608 KB | Adobe Acrobat PDF | View Details Download |