NDLI: Strategic deployment of network monitors for attack attribution

Content Provider	IEEE Xplore Digital Library
Author	Young June Pyun, Reeves, Douglas S.
Copyright Year	2007
Description	Author affiliation: Department of Computer Science, North Carolina State University, Raleigh, 27695, USA (Young June Pyun,; Reeves, Douglas S.)
Abstract	Attacks launched over the Internet have become a pressing problem. Attackers make use of a variety of techniques to anonymize their traffic, in order to escape detection and prosecution. Despite much research on attack attribution, there has been little work on optimizing the number and placement of monitoring points for identifying the source of attacks with minimum ambiguity. This paper proposes such a method. The approach is based on the concept of graph separators. A separator partitions a network, such that the size of the separator is the number of monitors needed, and the size of a partition is the ambiguity in isolating the specific source of an attack. To achieve a desired degree of ambiguity, a good separator for the Internet is sought. Both vertex and edge separator heuristics are presented, which greedily select vertices of highest/lowest degree as monitors. The methods are evaluated for the Internet autonomous system (AS) topology. Experimental results show that the vertex separator heuristic requires just 5% of the ASes to be monitored to identify the source of an attack with little ambiguity. If only those links actually used for routing to a specific destination are considered, use of an edge separator requires 30% of the links to be monitored to achieve similar results. The results can be further improved if it is known that ASes have unequal probabilities of being the source of an attack.
Starting Page	525
Ending Page	534
File Size	315615
Page Count	10
File Format	PDF
ISBN	9781424414321
DOI	10.1109/BROADNETS.2007.4550478
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2007-09-10
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Particle separators Internet Monitoring IP networks Telecommunication traffic Computer displays Computer science Cryptography Routing protocols Safety
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Inter-AS traffic patterns and their implications

A BGP attack against traffic engineering

A practical approach to minimizing delays in Internet routing

Secure collective defense system

Improving Routing Security Using a Decentralized Public Key Distribution Algorithm

Real-time Analysis of Flow Data for Network Attack Detection

Transport for Carrier Grade Internet

A Network Management Tool For Inter-domain Policy Routing

Performance Comparison of TCP Traffic over Mobile IPv4 and IPv6 Networks and a Mobile Network Deployment Approach

Strategic deployment of network monitors for attack attribution

Similar Documents

Inter-AS traffic patterns and their implications

A BGP attack against traffic engineering

A practical approach to minimizing delays in Internet routing

Secure collective defense system

Improving Routing Security Using a Decentralized Public Key Distribution Algorithm

Real-time Analysis of Flow Data for Network Attack Detection

Transport for Carrier Grade Internet

A Network Management Tool For Inter-domain Policy Routing

Performance Comparison of TCP Traffic over Mobile IPv4 and IPv6 Networks and a Mobile Network Deployment Approach

Strategic deployment of network monitors for attack attribution