Geolocalization of proxied services and its application to fast-flux hidden servers

Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC

Volumn , Issue , 2009, Pages 184-189

  Castelluccia, Claude ^a   Kaafar, Mohamed Ali ^a   Manils, Pere ^a   Perito, Daniele ^a  

^a INRIA RHÔNE ALPES   (France)

Author keywords

Fast flux; Geolocalization; Hidden servers

Indexed keywords

CONTROLLED ENVIRONMENT; FAST-FLUX; GEOGRAPHIC LOCATION; GEOLOCALIZATION; ITS APPLICATIONS; MEAN DISTANCES; NETWORK MEASUREMENT; PHYSICAL LOCATIONS;

MEASUREMENTS;

CRIME;

EID: 84877759806     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1644893.1644915     Document Type: Conference Paper

References (13)

1. BERNARD WONG, IVAN STOYANOV, E. G. S. Octant: A comprehensive framework for the geolocalization of internet hosts. In Symposium on Networked System Design and Implementation NSDI (2007).
2. DABEK, F., COX, R., KAASHOEK, F., AND MORRIS, R. Vivaldi: A decentralized network coordinate system. In SIGCOMM (2004), pp. 15-26.
3. DRAPER, R. N., AND HARRY, S. Applied Regression Analysis (Wiley Series in Probability and Statistics), ed. John Wiley & Sons Inc.
4. GUEYE, B., ZIVIANI, A., CROVELLA, M., AND FDIDA, S. Constraint-based geolocation of internet hosts. Networking, In IEEE/ACM Transactions on 14, 6 (Dec. 2006), 1219-1232.
5. HEXASOFT DEVELOPMENT SDN. BHD. ("HDSB"). Ip-to-geolocation db. http://www.ip2location.com/2009 (accessed Apr, 2009).
6. HOLZ, T., STEINER, M., DAHL, F., BIERSACK, E., AND FREILING, F. Measurements and mitigation of peer-to-peer-based botnets: a case study on storm worm. In LEETÕ08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats (Berkeley, CA, USA, 2008), USENIX Association, pp. 1-9.
7. NAZARIO, J. Walking waledac. http://asert.arbornetworks.com/2009/01/ walking-waledec/2009 (accessed Apr, 2009).
8. NAZARIO, J., AND HOLZ, T. As the net churns: Fast-flux botnet observations. In the 3rd International Conference on Malicious and Unwanted Software, 2008. MALWARE 2008. pp. 24-31.
9. NG, E. T. S., AND ZHANG, H. A network positioning system for the internet. In ATEC Õ04: Proceedings of the annual conference on USENIX Annual Technical Conference (Berkeley, CA, USA, 2004), USENIX Association, p. 11.
10. PROVOS, N. A virtual honeypot framework. In Proceedings of the 13th USENIX Security Symposium (2003), pp. 1-14.
11. RAJAB, M. A., ZARFOSS, J., MONROSE, F., AND TERZIS, A. My botnet is bigger than yours (maybe, better than yours): why size estimates remain challenging. In HotBots'07: Proceedings of the first conference on First Workshop on Hot Topics in Understanding Botnets (Berkeley, CA, USA, 2007), USENIX Association.
12. SUN MICROSYSTEMS INC. Virtual box. http://www.virtualbox.org/, 2009 (accessed Apr, 2009).
13. ZHENG, H., LUA, E. K., PIAS, M., AND GRIFFIN, T. G. Internet routing policies and round-trip-times.In Passive Active Measurement Conference PAM (2005).