Estimating the number of users behind IP addresses for combating abusive traffic

Proceedings of the ACM SIGKDD International Conference on Knowledge Discovery and Data Mining

Volumn , Issue , 2011, Pages 249-257

  Metwally, Ahmed ^a   Paduano, Matt ^a  

^a GOOGLE INC   (United States)

Author keywords

Abusive traffic filtering; Advertisement click fraud; IP size estimation; Real data experiments

Indexed keywords

CRIME; FILTRATION;

ABUSIVE TRAFFIC FILTERING; ADVERTISEMENT CLICK FRAUD; CLICK FRAUD; DDOS ATTACK; FALSE POSITIVE RATES; GOOGLE+; IP SIZE ESTIMATION; REAL DATA EXPERIMENT; SIZE ESTIMATION; TRAFFIC FILTERING;

DENIAL-OF-SERVICE ATTACK;

EID: 80052680843     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2020408.2020452     Document Type: Conference Paper

References (20)

1. D. Anderson, C. Fleizach, S. Savage, and G. Voelker. Spamscatter: Characterizing Internet Scam Hosting Infrastructure. In Proceedings of the 16th USENIX Security Symposium, pages 135-148, 2007.
2. S. Bellovin. A Technique for Counting NATted hosts. In Proceedings of the 2nd ACM SIGCOMM IMW Workshop on Internet measurment, pages 267-272, 2002.
3. P. Bloomfield. Fourier Analysis of Time Series: An Introduction. Wiley-IEEE, 2004.
4. M. Casado and M. Freedman. Peering Through the Shroud: The Effect of Edge Opacity on IP-Based Client Identification. In Proceedings of the 4th ACM/USENIX NSDI Symposium on Networked Systems Design and Implementation, pages 173-186, 2007.
5. M. Freedman, M. Vutukuru, N. Feamster, and H. Balakrishnan. Geographic Locality of IP Prefixes. In Proceedings of the 5th ACM SIGCOMM IMC Conference on Internet Measurement, pages 13-13, 2005.
6. J. Friedman. Multivariate Adaptive Regression Splines. Annals of Statistics, 19(1), 1991.
7. J. Hamilton. Time series analysis. Princeton University Press, illustrated edition, 1994.
8. R. Koenker and K. Hallock. Quantile Regression. Journal of Economic Perspectives, 15(4):143-156, 2001. (Pubitemid 33594780)
9. T. Kohno, A. Broido, and K. Claffy. Remote Physical Device Fingerprinting. In Proceedings of the 26th IEEE S&P Symposium on Security and Privacy, pages 211-225, 2005. An extended version appeared in the IEEE Transactions on Dependable and Secure Computing, 2(2):93-108, 2005. (Pubitemid 41543657)
10. A. Metwally, D. Agrawal, and A. El Abbadi. DETECTIVES: DETEcting Coalition hiT Inflation attacks in adVertising nEtworks Streams. In Proceedings of the 16th WWW International World Wide Web Conference, pages 241-250, 2007. (Pubitemid 47582254)
11. A. Metwally, F. Emeķci, D. Agrawal, and A. El Abbadi. SLEUTH: Single-pubLisher attack dEtection Using correlaTion Hunting. Proceedings of the VLDB Endowment, 1(2):1217-1228, 2008.
12. S. Murdoch. Hot or Not: Revealing Hidden Services by their Clock Skew. In Proceedings of the 13th ACM CCS conference on Computer and Communications Security, pages 27-36, 2006. (Pubitemid 47131353)
13. T. Peng, C. Leckie, and K. Ramamohanarao. Proactively Detecting Distributed Denial of Service Attacks Using Source IP Address Monitoring. In Proceedings of the 3rd International IFIP-TC6 Networking Conference, pages 771-782, 2004.
14. R. Pike, S. Dorward, R. Griesemer, and S. Quinlan. Interpreting the Data: Parallel Analysis with Sawzall. Scientific Programming, 13(4):277-298, 2005. (Pubitemid 43063583)
15. A. Ramachandran, N. Feamster, and S. Vempala. Filtering Spam with Behavioral Blacklisting. In Proceedings of the 14th ACM CCS Conference on Computer and Communications Security, pages 342-351, 2007.
16. G. Snedecor and W. Cochran. Statistical Methods. Wiley, John & Sons, Incorporated, eighth edition, 1991.
17. D. West. Updating Mean and Variance Estimates: An Improved Method. Communications of the ACM, 22(9):532-535, 1979. (Pubitemid 10415709)
18. Whois.net. Domain Research Tool. http://www.whois.net.
19. Y. Xie, F. Yu, K. Achan, E. Gillum, M. Goldszmidt, and T. Wobber. How Dynamic are IP Addresses? In Proceedings of the 22nd ACM SIGCOMM Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, pages 301-312, 2007. (Pubitemid 350239793)
20. L. Zhuang, J. Dunagan, D. Simon, H. Wang, and J. Tygar. Characterizing Botnets from Email Spam Records. In Proceedings of the 1st Usenix LEET Workshop on Large-Scale Exploits and Emergent Threats, pages 1-9, 2008.