NDLI: Evaluating a Dynamic Internet Threat Monitoring Method for Preventing PN Code-Based Localization Attack

Content Provider	IEEE Xplore Digital Library
Author	Narita, Masaki Ogura, Kanayo Bista, Bhed Bahadur Takata, Toyoo
Copyright Year	2014
Abstract	The Internet threat monitoring systems are developed to grasp malicious activities on the Internet. Those systems consist of a data center and sensors deployed on the Internet. Sensors capture malicious packets and report to the data center. The data center investigates the latest trend of attacks by analyzing those packets and the result is open to the public. To publish precise monitored results, sensors are deployed in secret and hidden from outside. On the other hand, attackers intend to detect sensors for evading them. This attack is known as localization attacks to Internet threat monitoring systems. Recent localization attacks adopting PN code is sophisticated and effective countermeasure is not developed yet. Therefore, we propose a dynamic Internet threat monitoring method. This method switches sensors whose monitored results that reflect to published results in a data center as a countermeasure for PN code-based localization attack. We evaluated our method from the aspect of tolerance to the attack by applying raw captured packets provided by nicter. Meanwhile, the existing systems always publish monitored results reported by whole sensors. Therefore, the information that our method provides would decrease compared to that of the existing systems. However, we show that the decrease of information is sufficiently small.
Starting Page	271
Ending Page	278
File Size	604028
Page Count	8
File Format	PDF
e-ISBN	9781479942244
DOI	10.1109/NBiS.2014.57
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2014-09-10
Publisher Place	Italy
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Schedules Darknet Correlation Internet threat monitoring system Ports (Computers) Localization attack Sensor systems Internet Monitoring
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Study on Noise-Tolerant PN Code-Based Localization Attacks to Internet Threat Monitors by Exploiting Multiple Ports

Iloc: an invisible localization attack to internet threat monitoring systems.

Comparative analysis of darknet traffic characteristics between darknet sensors

Perfection of Recent Attacks using IP

Towards a taxonomy of darknet traffic

An Invisible Localization Attack to Internet Threat Monitors

1 an invisible localization attack to internet threat monitors.

On effective localization attacks against Internet Threat monitors

Extended Darknet: Multi-Dimensional Internet Threat Monitoring System

Evaluating a Dynamic Internet Threat Monitoring Method for Preventing PN Code-Based Localization Attack

Similar Documents

A Study on Noise-Tolerant PN Code-Based Localization Attacks to Internet Threat Monitors by Exploiting Multiple Ports

Iloc: an invisible localization attack to internet threat monitoring systems.

Comparative analysis of darknet traffic characteristics between darknet sensors

Perfection of Recent Attacks using IP

Towards a taxonomy of darknet traffic

An Invisible Localization Attack to Internet Threat Monitors

1 an invisible localization attack to internet threat monitors.

On effective localization attacks against Internet Threat monitors

Extended Darknet: Multi-Dimensional Internet Threat Monitoring System

Evaluating a Dynamic Internet Threat Monitoring Method for Preventing PN Code-Based Localization Attack