NDLI: Abnormally malicious autonomous systems and their internet connectivity

Content Provider	ACM Digital Library
Author	Gupta, Minaxi Shue, Craig A. Kalafut, Andrew J.
Copyright Year	2012
Abstract	While many attacks are distributed across botnets, investigators and network operators have recently identified malicious networks through high profile autonomous system (AS) depeerings and network shutdowns. In this paper, we explore whether some ASs indeed are safe havens for malicious activity. We look for ISPs and ASs that exhibit disproportionately high malicious behavior using 10 popular blacklists, plus local spam data, and extensive DNS resolutions based on the contents of the blacklists. We find that some ASs have over 80% of their routable IP address space blacklisted. Yet others account for large fractions of blacklisted IP addresses. Several ASs regularly peer with ASs associated with significant malicious activity. We also find that malicious ASs as a whole differ from benign ones in other properties not obviously related to their malicious activities, such as more frequent connectivity changes with their BGP peers. Overall, we conclude that examining malicious activity at AS granularity can unearth networks with lax security or those that harbor cybercrime.
Starting Page	220
Ending Page	230
Page Count	11
File Format	PDF
ISSN	10636692
DOI	10.1109/TNET.2011.2157699
Volume Number	20
Issue Number	1
Journal	IEEE/ACM Transactions on Networking (TON)
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2012-02-01
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Autonomous systems (ASs) Security
Content Type	Text
Resource Type	Article
Subject	Electrical and Electronic Engineering Computer Networks and Communications Software Computer Science Applications

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Abnormally Malicious Autonomous Systems and Their Internet Connectivity

Malicious Hubs: Detecting Abnormally Malicious Autonomous Systems

Optimal source-based filtering of malicious traffic

Detecting malicious facebook applications

Computing the types of the relationships between autonomous systems

Internet with transient destination-controlled addressing

Securing user-controlled routing infrastructures

Network firewalls

Exploring user-provided connectivity

Abnormally malicious autonomous systems and their internet connectivity

Similar Documents

Abnormally Malicious Autonomous Systems and Their Internet Connectivity

Malicious Hubs: Detecting Abnormally Malicious Autonomous Systems

Optimal source-based filtering of malicious traffic

Detecting malicious facebook applications

Computing the types of the relationships between autonomous systems

Internet with transient destination-controlled addressing

Securing user-controlled routing infrastructures

Network firewalls

Exploring user-provided connectivity

Abnormally malicious autonomous systems and their internet connectivity