Exploratory Data Analysis of a Network Telescope Traffic and Prediction of Port Probing Rates - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2018

Exploratory Data Analysis of a Network Telescope Traffic and Prediction of Port Probing Rates

Résumé

Understanding the properties exhibited by large scale network probing traffic would improve cyber threat intelligence. In addition, the prediction of probing rates is a key feature for security practitioners in their endeavors for making better operational decisions and for enhancing their defense strategy skills. In this work, we study different aspects of the traffic captured by a /20 network telescope. First, we perform an exploratory data analysis of the collected probing activities. The investigation includes probing rates at the port level, services interesting top network probers and the distribution of probing rates by geolocation. Second, we extract the network probers exploration patterns. We model these behaviors using transition graphs decorated with probabilities of switching from a port to another. Finally, we assess the capacity of Non-stationary Autoregressive and Vector Autoregressive models in predicting port probing rates as a first step towards using more robust models for better forecasting performance.
Fichier principal
Vignette du fichier
main.pdf (327.36 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01947984 , version 1 (07-12-2018)

Identifiants

  • HAL Id : hal-01947984 , version 1

Citer

Mehdi Zakroum, Abdellah Houmz, Mounir Ghogho, Ghita Mezzour, Abdelkader Lahmadi, et al.. Exploratory Data Analysis of a Network Telescope Traffic and Prediction of Port Probing Rates. ISI 2018 - IEEE Intelligence and Security Informatics, Nov 2018, Miami, United States. ⟨hal-01947984⟩
263 Consultations
182 Téléchargements

Partager

Gmail Facebook X LinkedIn More