ASMATRA: Rankin g ASs Providing Transit Service to Malware Hosters - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2013

ASMATRA: Rankin g ASs Providing Transit Service to Malware Hosters

Abstract

The Internet has grown into an enormous network offering a variety of services, which are spread over a multitude of domains. BGP-routing and Autonomous Systems (AS) are the key components for maintaining high connectivity in the Internet. Unfortunately, Internet Service Providers (ISPs) operating ASs do not only host normal users and content, but also malicious content used by attackers for spreading malware, hosting phishing web-sites or performing any kind of fraudulent activity. Practical analysis shows that such malware-providing ASs prevent themselves from being de-peered by hiding behind other ASs, which do not host the malware themselves but simply provide transit service for malware. This paper presents a new method for detecting ASs that provide transit service for malware hosters, without being malicious themselves. A formal definition of the problem and the metrics are determined by using the AS graph. The PageRank algorithm is applied to improve the scalability and the completeness of the approach. The method is assessed on real and publicly available datasets, showing promising results.

Keywords

Fichier principal
Vignette du fichier
im_cr_final.pdf (567.61 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-00846082 , version 1 (18-07-2013)

Identifiers

  • HAL Id : hal-00846082 , version 1

Cite

Cynthia Wagner, Jérôme François, Radu State, Alexandre Dulaunoy, Thomas Engel, et al.. ASMATRA: Rankin g ASs Providing Transit Service to Malware Hosters. International Symposium on Integrated Network Management, May 2013, Ghent, Belgium. ⟨hal-00846082⟩
211 View
366 Download

Share

Gmail Facebook Twitter LinkedIn More