A source analysis of the conficker outbreak from a network telescope.
- Authors: Irwin, Barry V W
- Date: 2013
- Subjects: To be catalogued
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/429742 , vital:72636 , 10.23919/SAIEE.2013.8531865
- Description: This paper discusses a dataset of some 16 million packets targeting port 445/tcp collected by a network telescope utilising a /24 netblock in South African IP address space. An initial overview of the collected data is provided. This is followed by a detailed analysis of the packet characteristics observed, including size and TTL. The peculiarities of the observed target selection and the results of the flaw in the Conficker worm's propagation algorithm are presented. An analysis of the 4 million observed source hosts is reported, grouped by both packet counts and the number of distinct hosts per network address block. Address blocks of size /8, 16 and 24 are used for groupings. The localisation, by geographic region and numerical proximity, of high ranking aggregate netblocks is highlighted. The observed shift in geopolitical origins observed during the evolution of the Conficker worm is also discussed. The paper concludes with some overall analyses, and consideration of the application of network telescopes to the monitoring of such outbreaks in the future.
- Full Text:
- Date Issued: 2013
- Authors: Irwin, Barry V W
- Date: 2013
- Subjects: To be catalogued
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/429742 , vital:72636 , 10.23919/SAIEE.2013.8531865
- Description: This paper discusses a dataset of some 16 million packets targeting port 445/tcp collected by a network telescope utilising a /24 netblock in South African IP address space. An initial overview of the collected data is provided. This is followed by a detailed analysis of the packet characteristics observed, including size and TTL. The peculiarities of the observed target selection and the results of the flaw in the Conficker worm's propagation algorithm are presented. An analysis of the 4 million observed source hosts is reported, grouped by both packet counts and the number of distinct hosts per network address block. Address blocks of size /8, 16 and 24 are used for groupings. The localisation, by geographic region and numerical proximity, of high ranking aggregate netblocks is highlighted. The observed shift in geopolitical origins observed during the evolution of the Conficker worm is also discussed. The paper concludes with some overall analyses, and consideration of the application of network telescopes to the monitoring of such outbreaks in the future.
- Full Text:
- Date Issued: 2013
An invader within an altered landscape: one catfish, two rivers and an inter-basin water transfer scheme
- Kadye, Wilbert T, Booth, Anthony J
- Authors: Kadye, Wilbert T , Booth, Anthony J
- Date: 2013
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/123776 , vital:35494 , https://doi.10.1002/rra.2599
- Description: African sharptooth catfish Clarias gariepinus has become established as a non-native invasive species in Eastern Cape, South Africa, where it was translocated primarily through an inter-basin water transfer scheme into the Great Fish and Sundays rivers. This study examined the patterns in catfish distribution and abundance, and compared trophic niches in relation to the ichthyofauna of the two rivers. Correspondence analysis revealed upstream to downstream gradients associated with the spatial distribution in species richness for most species within the mainstream and mainstream to tributary gradients that were associated mostly with the spatial distribution of native minnows in both rivers. Catfish was predicted to occur widely within the mainstream habitats and to decrease progressively from mainstreams to tributaries. Based on classification and regression trees, the physico-chemical environment was found to be a good proxy for predicting the occurrence and abundance of catfish. Although non-significant relationships were observed between catfish and other native fish species abundances, the study suggests potential impact due to predation and interference in habitats where the invader co-occurs with other fishes. Comparisons of trophic niches indicated higher trophic diversity for the mainstream ichthyofauna than the tributary communities in both rivers, suggesting an upstream to downstream continuum in community structure and resource availability. Catfish within the invaded mainstream had comparable trophic niches and similar dispersion patterns among individuals for both rivers, but indicated differences in shapes of scatter. This suggests that the catfish exhibited a differential response, probably in relation to resource availability, that may be indicative of its dietary plasticity. The study suggests the proliferation of catfish and its probable impact within the mainstream flow-altered habitats where invasion resistance was possibly reduced. Comparisons of trophic niches provided information on its probable impact at different scales and the potential risk of invasion of tributaries inhabited by native minnow species.
- Full Text:
- Date Issued: 2013
- Authors: Kadye, Wilbert T , Booth, Anthony J
- Date: 2013
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/123776 , vital:35494 , https://doi.10.1002/rra.2599
- Description: African sharptooth catfish Clarias gariepinus has become established as a non-native invasive species in Eastern Cape, South Africa, where it was translocated primarily through an inter-basin water transfer scheme into the Great Fish and Sundays rivers. This study examined the patterns in catfish distribution and abundance, and compared trophic niches in relation to the ichthyofauna of the two rivers. Correspondence analysis revealed upstream to downstream gradients associated with the spatial distribution in species richness for most species within the mainstream and mainstream to tributary gradients that were associated mostly with the spatial distribution of native minnows in both rivers. Catfish was predicted to occur widely within the mainstream habitats and to decrease progressively from mainstreams to tributaries. Based on classification and regression trees, the physico-chemical environment was found to be a good proxy for predicting the occurrence and abundance of catfish. Although non-significant relationships were observed between catfish and other native fish species abundances, the study suggests potential impact due to predation and interference in habitats where the invader co-occurs with other fishes. Comparisons of trophic niches indicated higher trophic diversity for the mainstream ichthyofauna than the tributary communities in both rivers, suggesting an upstream to downstream continuum in community structure and resource availability. Catfish within the invaded mainstream had comparable trophic niches and similar dispersion patterns among individuals for both rivers, but indicated differences in shapes of scatter. This suggests that the catfish exhibited a differential response, probably in relation to resource availability, that may be indicative of its dietary plasticity. The study suggests the proliferation of catfish and its probable impact within the mainstream flow-altered habitats where invasion resistance was possibly reduced. Comparisons of trophic niches provided information on its probable impact at different scales and the potential risk of invasion of tributaries inhabited by native minnow species.
- Full Text:
- Date Issued: 2013
- «
- ‹
- 1
- ›
- »