Malicious hubs: Detecting abnormally malicious autonomous systems

Proceedings - IEEE INFOCOM

Volumn , Issue , 2010, Pages

  Kalafut, Andrew J ^a   Shue, Craig A ^b   Gupta, Minaxi ^a  

^a INDIANA UNIVERSITY   (United States)

^b OAK RIDGE NATIONAL LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTONOMOUS SYSTEMS; BOTNETS; CYBERCRIME; IP ADDRESSS; MALICIOUS ACTIVITIES; MALICIOUS BEHAVIOR; NETWORK OPERATOR;

COMPUTER CRIME;

EID: 77953337455     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOM.2010.5462220     Document Type: Conference Paper

References (22)

1. J. Hruska, "Bad seed ISP Atrivo cut off from rest of the Internet," 2008. [Online]. Available: http://arstechnica.com/security/news/ 2008/ 09/bad-seed-isp-atrivo-cut-of%f-from-rest-of-the-internet.ars
2. -, "Spam sees big nosedive as rogue ISP McColo knocked offline," 2008. [Online]. Available: http://arstechnica.com/security/news/ 2008/ 11/spam-sees-big-nosedive-as-%rogue-isp-mccolo-knocked-offline.ars
3. J. Cheng, "FTC forces hive of scum and villainy ISP offline," 2009. [Online]. Available: http://arstechnica.com/tech-policy/news/2009/06/ ftc-forces-hive-of-scum%-and-villainy-isp-offline.ars
4. APWG, "Anti-phishing working group," http://www.antiphishing. org/.
5. OpenDNS, "PhishTank," http://www.phishtank.com/.
6. Support Intelligence, LLC, http://www.support-intelligence.com/.
7. SURBL, http://www.surbl.org/.
8. Spamhaus Project, "SBL," http://www.spamhaus.org/sbl/index. lasso.
9. -, "XBL," http://www.spamhaus.org/xbl/index.lasso.
10. NETpilot GmbH, "Viruswatch mailing list," http://lists.clean- mx.com/cgi-bin/mailman/listinfo/viruswatch.
11. eSoft Inc., http://www.esoft.com/.
12. MalwarePatrol, "Malwarepatrol - malware block list," http://www. malwarepatrol.net/lists.shtml.
13. ShadowServer Foundation, http://www.shadowserver.org/wiki/.
14. University of Oregon Advanced Network Technology Center, "Route Views project," http://www.routeviews.org/.
15. A. Moushchuk, T. Bragin, S. Gribble, and H. Levy, "A crawler-based study of spyware on the web," in Internet Society Network and Distributed System Security Symposium (NDSS), 2006.
16. N. Provos, P. Mavrommatis, M. Rajab, and F. Monrose, "All your iFRAMEs point to us," in USENIX Security Symposium, 2008.
17. A. Ramachandran and N. Feamster, "Understanding the network-level behavior of spammers," in ACM SIGCOMM, 2006.
18. M. Konte, N. Feamster, and J. Jung, "Dynamics of online scam hosting infrastructure," in Passive and Active Measurement Conference (PAM), 2009.
19. G. D. Battista, M. Patrignani, and M. Pizzonia, "Computing the types of the relationships between autonomous systems," in IEEE Conference on Computer Communications (INFOCOM), 2003.
20. X. Dimitropoulos, D. Krioukov, M. Fomenkov, B. Huffaker, Y. Hyun, kc claffy, and G. Riley, "AS relationships: Inference and validation," ACM SIGCOMM Computer Communications Review (CCR), vol. 37, no. 1, pp. 29-40, Jan. 2007.
21. L. Gao, "On inferring autonomous system relationships in the internet," IEEE/ACM Transactions Of Networking, vol. 9, no. 6, pp. 733-745, Dec. 2001.
22. L. Subramanian, S. Agarwal, J. Rexford, and R. H. Katz, "Characterizing the Internet hierarchy from multiple vantage points," in IEEE Conference on Computer Communications (INFOCOM), 20002.