Finding and Analyzing Evil Cities on the Internet


Share/Save/Bookmark

Polen van, Matthijs G.T. and Moura, Giovane C.M. and Pras, Aiko (2011) Finding and Analyzing Evil Cities on the Internet. In: 5th International Conference on Autonomous Infrastructure, Management and Security, AIMS 2011, June 13-17, 2011, Nancy, France.

[img]
Preview
PDF
430Kb
Abstract:IP Geolocation is used to determine the geographical location of Internet users based on their IP addresses. When it comes to security, most of the traditional geolocation analysis is performed at country level. Since countries usually have many cities/towns of different sizes, it is expected that they behave differently when performing malicious activities. Therefore, in this paper we refine geolocation analysis to the city level. The idea is to find the most dangerous cities on the Internet and observe how they behave. This information can then be used by security analysts to improve their methods and tools. To perform this analysis, we have obtained and evaluated data from a real-world honeypot network of 125 hosts and from production e-mail servers.
Item Type:Conference or Workshop Item
Copyright:© 2011 Springer
Faculty:
Electrical Engineering, Mathematics and Computer Science (EEMCS)
Research Group:
Link to this item:http://purl.utwente.nl/publications/76708
Official URL:http://dx.doi.org/10.1007/978-3-642-21484-4_4
Export this item as:BibTeX
EndNote
HTML Citation
Reference Manager

 

Repository Staff Only: item control page

Metis ID: 277609