How dynamic are IP addresses?

ACM SIGCOMM 2007: Conference on Computer Communications

Volumn , Issue , 2007, Pages 301-312

  Xie, Yinglian ^a   Yu, Fang ^a   Achan, Kannan ^a   Gillum, Eliot ^a   Goldszmidt, Moises ^a   Wobber, Ted ^a  

^a MICROSOFT RESEARCH   (United States)

Author keywords

DHCP; Dynamic IP addresses; Entropy; IP volatility; Spam detection

Indexed keywords

SITE IDENTIFICATION; SPAM DETECTION;

DATA TRANSFER; INTRUSION DETECTION; SERVERS; SPAMMING; USER INTERFACES;

INTERNET PROTOCOLS;

EID: 36949011812     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1282380.1282415     Document Type: Conference Paper

References (32)

1. Multi-DNSBL Lookup. http://www.completewhois.com/rbl.lookup.htm.
2. Braunson. Guide To Change Your IP Address (Part 2). http://totaldream. org/index.php?page= articles&view=article&id=101, 2006.
3. M. Casado and M. J. Freedman. Peering through the Shroud: The Effect of Edge Opacity on IP-based Client Identification. In Proc. 4th USENIX/ACM Symposium on Networked Systems Design and Implementation (NSDI), 2007.
4. K. R. Castleman. Digital Image Processing. New Jersey: Prentice Hall, 1996.
5. Cisco Network. Registrar User's Guide. http://www.cisco.com/en/US/ products/sw/netmgtsw/ps1982/products.user.guide.list.html.
6. R. Droms. Dynamic Host Configuration Protocol. RFC 2.131: http://www.dhcp.org, 1997.
7. Dynablock Dynamic IP list, http://www.njabl.org, recently aquired by Spamhaus, http://www.spamhaus.org/pbl/index, lasso, 2007.
8. J. Evers. Most Spam Still Coming From the U.S. http://news.com/ Most+spam+still+coming+from+ the+U.S./2100-1029.3-6030758.html, 2006.
9. S. Foo, S. C. Hui, S. W. Yip, and Y. He. Approaches for Resolving Dynamic IP Addressing. Internet Research: Electronic Networking Applications and Policy, 7(3):208-216, 1997.
10. M. Freedman, M. Vutukuru, N. Feamster, and H. Balakrishnan. Geographic Locality of IP Prefixes. In Proc. of the ACM Internet Measurement Conference (IMC), 2005.
11. J. Hovold. Naive Bayes Spam. Filtering Using Word Position Attributes. In Conference on Email and Anti-Spam, 2005.
12. IDC Netwurx. http://www.idcnet.com, 2006.
13. J. Jung and E. Sit. An Empirical Study of Spam Traffic and the Use of DNS Black Lists. In Proc. of the ACM Internet Measurement Conference (IMC), 2004.
14. T. Kohno, A. Broido, and K. Claffy. Remote Physical Device Fingerprinting. In IEEE Symposium on Security and Privacy, 2005.
15. B. Krishnamurthy and J. Wang. On Network-Aware Clustering of Web Clients. In Proc. of Sigcomm, 2000.
16. H. Lee and A. Y. Ng. Spam Deobfuscation Using a Hidden Markov Model. In Conference on Email and Anti-Spam, 2005.
17. F. Li and M. H. Hsieh. An Empirical Study of Clustering Behavior of Spammers and Group-based Anti-Spam Strategies. In Conference on Email and Anti-Spam, 2006.
18. D. Lowd and C. Meek. Good Word Attacks on Statistical Spam Filters. In Conference on Email and Anti-Spam, 2005.
19. D. Majoras, T. B. Leary, P. J. Harbour, and J. Leibowitz. Effectiveness and Enforcement of the CAN-SPAM Act: A Report to Congress, http://www.ftc.gov/ bcp/conline/edcams/spam/reports.htm, 2005.
20. V. N. Padmanabhan and L. Subramanian. An Investigation of Geographic Mapping Techniques for Internet Hosts. In Proc. of Sigcomm, 2001.
21. Postini Message Security and Management Update for October Reveals that Spam is Back with a Vengeance. http://postini.com/news.events/pr/pr110606.php, 2006.
22. A. Ramachandran, D. Dagon, and N. Feamster. Can DNSBased Blacklists Keep Up with Bots? In Conference on Email and Anti-Spam, 2006.
23. A. Ramachandran and N. Feamster. Understanding the Network-Level Behavior of Spammers. In Proc. of Sigcomm, 2006.
24. A. Ramachandran, N. Feamster, and D. Dagon. Revealing Botnet Membership Using DNSBL Counter-intelligence. In 2nd Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI), 2006.
25. Route Views Project. http://www.routeviews.org.
26. V. Sekar, Y. Xie, M. K. Reiter, and H. Zhang. A Multi-Resolution Approach for Worm Detection and Containment. In DSN, 2006.
27. M. Sullivan and L. Munoz. Suggested Generic DNS Naming Schemes for Large Networks and Unassigned Hosts. RFC draft: http://tools.ietf.org/wg/dnsop/draft- msullivan-dnsop-generic-naming-schemes-00. txt, 2006.
28. The Apache SpamAssassin Project. http://spamassassin.apache.org.
29. Trend Micro Inc. Mail Abuse Prevention System. http://www.trendmicro.com/ en/products/global/kelkea.htm.
30. Whois.net - Domain Research Tools, http://www.whois.net.
31. M. Xie, H. Yin, and H. Wang. An Effective Defense Against Email Spam Laundering. In Proc. of the ACM Computer and Communications Security (CCS), 2006.
32. Y. Xie, V. Sekar, D. Maltz, M. Reiter, and H. Zhang. Worm Origin Identification Using Random Moonwalks. In Proc. of the IEEE Symposium on Security and Privacy, 2005.