Observed correlations of unsolicited network traffic over five distinct IPv4 netblocks

Nkhumeleni, Thiswilondi M; Irwin, Barry V W

Title: Observed correlations of unsolicited network traffic over five distinct IPv4 netblocks
Creator: Nkhumeleni, Thiswilondi M
Creator: Irwin, Barry V W
Subject: To be catalogued
Date Issued: 2015
Date: 2015
Type: text
Type: article
Identifier: http://hdl.handle.net/10962/430408
Identifier: vital:72689
Identifier: https://www.academic-bookshop.com/ourshop/prod_3774091-ICCWS-2015-10th-International-Conference-on-Cyber-Warfare-and-Security-Kruger-National-Park-South-Africa-PRINT-ver-ISBN-978191030996.html
Description: Using network telescopes to monitor unused IP address space provides a favorable environment for researchers to study and detect malware, denial of service and scanning activities within global IPv4 address space. This research focuses on comparative and correlation analysis of traffic activity across the network of telescope sensors. Analysis is done using data collected over a 12 month period on five network telescopes each with an aperture size of/24, operated in disjoint IPv4 address space. These were considered as two distinct groupings. Time series’ representing time-based traffic activity observed on these sensors was constructed. Using the cross-and auto-correlation methods of time series analysis, moderate correlation of traffic activity was achieved between telescope sensors in each category. Weak to moderate correlation was calculated when comparing category A and category B network telescopes’ datasets. Results were significantly improved by considering TCP traffic separately. Moderate to strong correlation coefficients in each category were calculated when using TCP traffic only. UDP traffic analysis showed weaker correlation between sensors, however the uniformity of ICMP traffic showed correlation of traffic activity across all sensors. The results confirmed the visual observation of traffic relativity in telescope sensors within the same category and quantitatively analyzed the correlation of network telescopes’ traffic activity.
Format: 8 pages
Format: pdf
Language: English
Relation: Proceedings of the10th International Conference on Cyber Warfare and Security
Relation: Irwin, B. and Nkhumeleni, T.M., 2015, February. Observed correlations of unsolicited network traffic over five distinct IPv4 netblocks. In Proceedings of the10th International Conference on Cyber Warfare and Security (ICCWS 2015). IGI Global, Hershey, PA (Vol. 17033, pp. 135-43)
Relation: Proceedings of the10th International Conference on Cyber Warfare and Security volume 2015 number 1 135 143 2015 2048-9870
Rights: Publisher
Rights: Use of this resource is governed by the terms and conditions of the Academic Conferences and Publishing International Limited Statement (https://www.academic-bookshop.com/)

Hits: 71
Visitors: 74
Downloads: 4

Collections

Irwin, Barry V W (Prof)

RU Department of Computer Science

SDG 09. Industry, Innovation and Infrastructure

		Thumbnail	File	Description	Size	Format
View Details Download			SOURCE1	Observed correlations of unsolicited network traffic over five distinct IPv4 netblocks.pdf	594 KB	Adobe Acrobat PDF	View Details Download