NDLI: Classifying internet one-way traffic ( IMC '12 )

Please wait, while we are loading the content...

Analysis of a "/0" stealth scan from a botnet

RasterZip: compressing network monitoring data with support for partial decompression

Fathom: a browser-based network measurement platform

Evolution of social-attribute networks: measurements, modeling, and implications using google+

Watching videos from everywhere: a study of the PPTV mobile VoD system

Routing state distance: a path-based metric for network analysis

Obtaining in-context measurements of cellular network performance

Breaking for commercials: characterizing mobile advertising

Video telephony for end-consumers: measurement study of Google+, iChat, and Skype

Taster's choice: a comparative analysis of spam feeds

Beyond friendship: modeling user activity graphs on social network-based gifting applications

Sharing the cost of backbone networks: cui bono?

Detecting prefix hijackings in the internet with argus

Wire-speed statistical classification of network traffic on commodity hardware

Mitigating sampling error when measuring internet client IPv6 capabilities

Evolution of a location-based online social network: analysis and models

On the incompleteness of the AS-level graph: a novel methodology for BGP route collector placement

Cell vs. WiFi: on the performance of metro area mobile connections

Screen-off traffic characterization and optimization in 3G/4G networks

Range tomography: combining the practicality of boolean tomography with the resolution of analog tomography

Crime scene investigation: SMS spam data analysis

Inside dropbox: understanding personal cloud storage services

Content delivery and the natural evolution of DNS: remote dns trends, performance issues and alternative solutions

Concurrent prefix hijacks: occurrence and impacts

MAPLE: a scalable architecture for maintaining packet latency measurements

New kid on the block: exploring the google+ social graph

Video stream quality impacts viewer behavior: inferring causality using quasi-experimental designs

Quantifying violations of destination-based forwarding on the internet

Network performance of smart mobile handhelds in a university campus WiFi network

Configuring DHCP leases in the smartphone era

On traffic matrix completion in the internet

Longtime behavior of harvesting spam bots

Reducing allocation errors in network testbeds

Measuring the deployment of IPv6: topology, routing and performance

Classifying internet one-way traffic

Can you GET me now?: estimating the time-to-first-byte of HTTP transactions with passive measurements

Multi-scale dynamics in a massive online social network

Confused, timid, and unstable: picking a video streaming rate is hard

Revisiting broadband performance

Tackling bufferbloat in 3G/4G networks

DNS to the rescue: discerning content and services in a tangled web

Observing common spam in Twitter and email

Measuring the impact of the copyright amendment act on New Zealand residential DSL users

Towards geolocation of millions of IP addresses

Classifying internet one-way traffic ( IMC '12 )

Content Provider	ACM Digital Library
Author	Dimitropoulos, Xenofontas Glatz, Eduard
Abstract	Internet background radiation (IBR) is a very interesting piece of Internet traffic as it is the result of attacks and misconfigurations. Previous work has primarily analyzed IBR traffic to large unused IP address blocks called network telescopes. In this work, we build new techniques for monitoring one-way traffic in live networks with the main goals of 1) expanding our understanding of this interesting type of traffic towards live networks as well as of 2) making it useful for detecting and analyzing the impact of outages. Our first contribution is a classification scheme for dissecting one-way traffic into useful classes, including one-way traffic due to unreachable services, scanning, peer-to-peer applications, and backscatter. Our classification scheme is helpful for monitoring IBR traffic in live networks solely based on flow level data. After thoroughly validating our classifier, we use it to analyze a massive data-set that covers 7.41 petabytes of traffic from a large backbone network to shed light into the composition of one-way traffic. We find that the main sources of one-way traffic are malicious scanning, peer-to-peer applications, and outages. In addition, we report a number of interesting observations including that one-way traffic makes a very large fraction, i.e., between 34% and 67%, of the total number of flows to the monitored network, although it only accounts for only 3.4% of the number of packets, which suggests a new conceptual model for Internet traffic in which IBR is dominant in terms of flows. Finally, we demonstrate the utility of one-way traffic of the particularly interesting class of unreachable services for monitoring network and service outages by analyzing the impact of interesting events we detected in the network of our university.
Starting Page	37
Ending Page	50
Page Count	14
File Format	PDF
ISBN	9781450317054
DOI	10.1145/2398776.2398781
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2012-11-14
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Measurement methods Traffic analysis (anomaly detection classification)
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Classifying internet one-way traffic ( SIGMETRICS '12 )

Classifying internet one-way traffic

Practical anomaly detection based on classifying frequent traffic patterns

Multi-Resolution Anomaly Detection for the internet

Review of anomaly detection based on classifying frequent traffic patterns.

Documentation for “ Classifying Internet One-way Traffic ”

Volume based anomaly detection using LRD analysis of decomposed network traffic

Mining anomalies using traffic feature distributions

Traffic Anomaly Detection at Fine Time Scales with Bayes Nets

Classifying internet one-way traffic ( IMC '12 )

Similar Documents

Classifying internet one-way traffic ( SIGMETRICS '12 )

Classifying internet one-way traffic

Practical anomaly detection based on classifying frequent traffic patterns

Multi-Resolution Anomaly Detection for the internet

Review of anomaly detection based on classifying frequent traffic patterns.

Documentation for “ Classifying Internet One-way Traffic ”

Volume based anomaly detection using LRD analysis of decomposed network traffic

Mining anomalies using traffic feature distributions

Traffic Anomaly Detection at Fine Time Scales with Bayes Nets

Classifying internet one-way traffic ( IMC '12 )