Understanding IPv6 Internet background radiation

Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC

Volumn , Issue , 2013, Pages 105-118

  Czyz, Jakub ^a   Lady, Kyle ^a   Miller, Sam G ^a   Bailey, Michael ^a   Kallitsis, Michael ^b   Karir, Manish ^c  

^a UNIVERSITY OF MICHIGAN   (United States)

^b Merit Network Inc   (United States)

^c Department of Homeland Security Sci and Tech   (United States)

Author keywords

Darknet; Internet background radiation; IPv6; Measurement; Network pollution; Routing

Indexed keywords

DARKNET; INTERNET BACKGROUND RADIATION; IPV6; NETWORK OPERATOR; NETWORK TELESCOPES; RESEARCH COMMUNITIES; ROUTING; TRANSITION PERIOD;

INTERNET; MEASUREMENTS; RADIATION;

INTERNET PROTOCOLS;

EID: 84890105845     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2504730.2504732     Document Type: Conference Paper

References (40)

1. E. Aben, A. King, K. Benson, Y. Hyun, A. Dainotti, and K. Claffy. Lessons learned by "measuring," the Internet during/after the Sandy storm. In In Proceedings of FCC Workshop on Network Resiliency 2013, Feb. 2013.
2. Alexa Internet, Incorporated. Top 1,000,000 Sites. http://s3.amazonaws. com/alexa-static/top-1m.csv.zip.
3. J. I. Alvarez-Hamelin, L. Dall'Asta, A. Barrat, and A. Vespignani. k-core decomposition: a tool for the visualization of large scale networks. CoRR, abs/cs/0504107, 2005.
4. M. Bailey, E. Cooke, F. Jahanian, A. Myrick, and S. Sinha. Practical Darknet Measurement. In Proceedings of the 40th Annual Conference on Information Sciences and Systems (CISS '06), pages 1496-1501, Princeton, New Jersey, USA, Mar. 2006.
5. M. Bailey, E. Cooke, F. Jahanian, N. Provos, K. Rosaen, and D. Watson. Data Reduction for the Scalable Automated Analysis of Distributed Darknet Traffic. Proceedings of the USENIX/ACM Internet Measurement Conference, Oct. 2005.
6. P. Barford, R. Nowak, R. Willett, and V. Yegneswaran. Toward a Model for Source Address of Internet Background Radiation. In Passive and Active Measurement Conference (PAM), 2006.
7. N. Brownlee. One-Way Traffic Monitoring with iatmon. In N. Taft and F. Ricciato, editors, PAM, Volume 7192 of Lecture Notes in Computer Science, pages 179-188. Springer, 2012.
8. E. Cooke, M. Bailey, Z. M. Mao, D. Watson, and F. Jahanian. Toward understanding distributed blackhole placement. In Proceedings of the 2004 ACM Workshop on Rapid Malcode (WORM-04), New York, Oct 2004. ACM Press.
9. E. Cooke, M. Bailey, D. Watson, F. Jahanian, and J. Nazario. The Internet motion sensor: A distributed global scoped Internet threat monitoring system. Technical Report CSE-TR-491-04, University of Michigan, Electrical Engineering and Computer Science, July 2004.
10. A. Dainotti, A. King, K. Claffy, F. Papale, and A. Pescapè. Analysis of a "/0," Stealth Scan from a Botnet. In Internet Measurement Conference (IMC), Nov 2012.
11. A. Dainotti, C. Squarcella, E. Aben, K. C. Claffy, M. Chiesa, M. Russo, and A. Pescapé. Analysis of country-wide internet outages caused by censorship. In Proceedings of the 2011 ACM SIGCOMM conference on Internet measurement conference, IMC '11, pages 1-18, New York, NY, USA, 2011. ACM.
12. C. Deccio. Turning Down the Lights: Darknet Deployment Lessons Learned. Technical report, Sandia National Laboratories, 2012.
13. A. Dhamdhere, M. Luckie, B. Huffaker, K. Claffy, A. Elmokashfi, and E. Aben. Measuring the Deployment of IPv6: Topology, Routing and Performance. In Proceedings of the 12th ACM SIGCOMM Conference on Internet Measurement (IMC 2012).
14. M. Ford, J. Stevens, and J. Ronan. Initial Results from an IPv6 Darknet. In International Conference on Internet Surveillance and Protection, 2006.
15. E. Glatz and X. Dimitropoulos. Classifying internet one-way traffic. pages 417-418, 2012.
16. G. Gürsun, N. Ruchansky, E. Terzi, and M. Crovella. Inferring visibility: who's (not) talking to whom? SIGCOMM Comput. Commun. Rev., 2012.
17. W. Harrop and G. Armitage. Defining and evaluating greynets (sparse darknets). In Proceedings of the The IEEE Conference on Local Computer Networks 30th Anniversary, LCN '05, pages 344-350, Washington, DC, USA, 2005. IEEE Computer Society.
18. R. Hinden and S. Deering. RFC 4291: IP Version 6 Addressing Architecture, 2006.
19. R. Hinden and B. Haberman. RFC 4193: Unique Local IPv6 Unicast Addresses, 2005.
20. G. Huston. IPv6 Background Radiation. Technical report, 2012. Slides of a talk given at DUST 2012 - The 1st International Workshop on Darkspace and UnSolicited Traffic Analysis, May 14-15, San Diego, California.
21. J. Czyz, M. Allman, J. Zhang, S. Iekel-Johnson, E. Osterweil, and M. Bailey. Measuring IPv6 Adoption. ICSI Technical Report TR-13-004, August 2013.
22. J. Jarmoc. SQL Slammer - Ş 10 years later. http://www.secureworks. com/resources/blog/research/general-sql-slammer-10-years-later/, Mar. 2013.
23. M. Karir, G. Huston, G. Michaelson, and M. Bailey. Understanding ipv6 populations in the wild. In Passive and Active Measurement (PAM '13). 2013.
24. E. Karpilovsky, A. Gerber, D. Pei, J. Rexford, and A. Shaikh. Quantifying the Extent of IPv6 Deployment. In Proceedings of the 10th International Conference on Passive and Active Network Measurement, 2009.
25. A. King. Syria disappears from the Internet. http://blog.caida.org/best- available-data/2012/12/05/syria-disappears-from-the-internet/, 2012.
26. C. Kreibich, N. Weaver, B. Nechaev, and V. Paxson. Netalyzr: illuminating the edge network. In Proceedings of the 10th ACM SIGCOMM conference on Internet measurement, IMC '10, pages 246-259, New York, NY, USA, 2010. ACM.
27. V. I. Levenshtein. Binary codes capable of correcting deletions, insertions and reversals. Sov. Phys. Dokl., 6:707-710, 1966.
28. Microsoft. Microsoft Security Intelligence Report - July-December 2012. http://download.microsoft.com/download/E/0/F/E0F59BE7-E553-4888-9220- 1C79CBD14B4F/Microsoft-Security-Intelligence-Report-Volume-14-English.pdf, 2013.
29. D. Mills, J. Martin, J. Burbank, and W. Kasch. Network Time Protocol Version 4: Protocol and Algorithms Specification. RFC 5905 (Proposed Standard), June 2010.
30. D. Moore, C. Shannon, G. M. Voelker, and S. Savage. Network telescopes. Technical Report CS2004-0795, UC San Diego, July 2004.
31. R. Pang, V. Yegneswaran, P. Barford, V. Paxson, and L. Peterson. Characteristics of Internet background radiation. In Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, pages 27-40. ACM Press, 2004.
32. Y. Rekhter, B. Moskowitz, D. Karrenberg, G. J. de Groot, and E. Lear. Address Allocation for Private Internets, 1996.
33. RIPE NCC. Routing Information Service (RIS). http://www.ripe.net/ris/.
34. N. Sarrar, G. Maier, B. Ager, R. Sommer, and S. Uhlig. Investigating IPv6 Traffic - What Happened at the World IPv6 Day? In Proceedings of the 13th International Conference on Passive and Active Network Measurement, 2012.
35. University of Oregon. Route Views project. http://www.routeviews.org/.
36. VigilantMinds. MS-SQL Slammer Signature. http://seclists.org/snort/2003/ q1/871, Jan. 2003.
37. S. Walls and M. Karir. Internet pollution - part 2. Presented at the 51st North American Network Operators Grooup (NANOG51) Meeting in Miami, Florida, Feb. 2011.
38. E. Wustrow, M. Karir, M. Bailey, F. Jahanian, and G. Houston. Internet Background Radiation Revisited. In Proceedings of the 10th ACM SIGCOMM Conference on Internet Measurement (IMC '10), Melbourne, Australia, November 2010.
39. V. Yegneswaran, P. Barford, and D. Plonka. On the design and use of Internet sinks for network abuse monitoring. In Recent Advances in Intrusion Detection - Proceedings of the 7th International Symposium (RAID), Sophia Antipolis, French Riviera, France, 2004.
40. G. Zhang, B. Quoitin, and S. Zhou. Phase changes in the evolution of the IPv4 and IPv6 AS-Level Internet topologies. Computer Communications, 34(5), Apr. 2011.