A new service for increasing the effectiveness of network address blacklists

3rd Workshop on Steps to Reducing Unwanted Traffic on the Internet, SRUTI 2007

Volumn , Issue , 2007, Pages

  Zhang, Jian ^a   Porras, Phillip ^a   Ullrich, Johannes ^b  

^a SRI INTERNATIONAL   (United States)

^b SANS Technology Institute   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

FIREWALL LOGS; GOOGLE PAGERANK; INTERNET SERVICES; LINK ANALYSIS ALGORITHMS; NETWORK ADDRESS; NEW SERVICES; SOURCE ADDRESS; USAGE EXPERIENCE;

EID: 85077697048     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (10)

1. Sergey Brin and Lawrence Page. The anatomy of a large-scale hypertextual Web search engine. Computer Networks and ISDN Systems, 30(1-7):107-117, 1998.
2. Zesheng Chen and Chuanyi Ji. Optimal worm-scanning method using vulnerable-host distributions. In International Journal of Security and Networks (IJSN) Special Issue on “Computer & Network Security”, 2003.
3. Symantec Corporation. Deepsight threat management system home page. http://tms.symantec.com, 2007.
4. S. Katti, B. Krishnamurthy, and D. Katabi. Collaborating against common enemies. In Proceedings of the ACM SIG-COMM/USENIX Internet Measurement Conference, October 2005.
5. Steven M. Kay. Fundamentals of statistical signal processing: estimation theory. Prentice Hall, 1993.
6. Johannes Ullrich. DShield global worst offender list. https://feeds.dshield.org/block.txt.
7. Johannes Ullrich. DShield home page. http://www.dshield.org, 2007.
8. V. Yegneswaran, P. Barford, and S. Jha. Global intrusion detection in the domino overlay system. In Proceedings of Network and Distributed Security Symposium, June 2004.
9. J. Zhang, P. Porras, and J. Ullrich. Highly predictive blacklisting. Technical report, SRI International, 2007. available at http://www.cyber-ta.org/releases/HPB/HPB-SRI-TR-APril2007.pdf.
10. Jian Zhang, Phillip Porras, and Johannes Ullrich. Dshield highly predictive blacklist service. http://www.dshield.org/hpbinfo.html.