|
You are hereHome » NANOG Meeting Presentation Abstract
|
|
NANOG Meeting Presentation Abstract
Unconstrained Profiling of Internet Endpoints via Information on the Web | Meeting: | NANOG44 | |
Date / Time: | 2008-10-14 5:00pm - 5:30pm | |
Room: | Biltmore Bowl | |
Presenters: | Speakers: Antonio Nucci, Narus.Supranamaya Ranjan, NarusDr. Supranamaya Ranjan is a Senior Member of Technical Staff in the Office of CTO at Narus, Inc. He obtained his PhD in Electrical Engineering in 2005 from Rice University. His interests are in designing solutions for detecting and preventing all things malicious in the Internet including Worms, Distributed Denial-of-Service attacks (DDoS), Botnets and Prefix Hijacking attacks.Aleksandar Kuzmanovic, Northwestern University.Ionut Trestian, Northwestern UniversityIonut Trestian is a 2nd year PhD graduate student at Northwestern University, Evanston. He is advised by Prof. Aleksandar Kuzmanovic. His interests are broadly in the areas of network measurement, network security and social networks. | |
Abstract: | In this paper, we introduce a novel approach for profiling and classifying endpoints, i.e., IP addresses. We implement and deploy a Google-based profiling tool, which accurately characterizes endpoint behavior by collecting and strategically combining information freely available on the web. Our \'unconstrained endpoint profiling\' approach shows remarkable advances in the following scenarios: (i) Even when no packet traces are available, it can accurately predict application and protocol usage trends at arbitrary networks; (ii) When network traces are available, it dramatically outperforms state-of-the-art classification tools; (iii) When sampled flow-level traces are available, it retains high classification capabilities when other schemes literally fall apart. Using this approach, we perform unconstrained endpoint profiling at a global scale: for clients in four different world regions (Asia, South and North America and Europe). We provide the first-of-its kind endpoint analysis which reveals fascinating similarities and differences among these regions. | |
Files: | Ranjan Presentation(PDF)
Unconstrained Profiling of Internet Endpoints via Information on the Web
| |
Sponsors: | None. | |
Back to NANOG44 agenda. NANOG44 Abstracts- DNSSEC
Speakers: Richard Lamb, IANA/ICANN;
- ISP Security
Speakers: Danny McPherson, Arbor Networks; Warren KumariGoogle; .
- ISP Security
Speakers: Danny McPherson, Arbor Networks; Warren KumariGoogle; .
- Tools
Speakers: Joel Jaeggli, Nokia;
|
|