| Presentation | 2022-11-21 The visibility of port scan traffic analysis in many small-scale darknets Kodai Mizutani, Daisuke Kotani, Yasuo Okabe, |
|---|---|
| PDF Download Page |  PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | Darknets are one of information sources to grasp a trend of cyber-attcks. While the demand for IPv4 addresses is high, the number of newly allocatable IPv4 addresses running out. Therefore, it could become difficult to maintain a large-scale darknet because more IP addresses may be requested to be assigned to users, rather than the darknets. So, we need to clarify how the reduction of size of the darknets affects the visibility, which is how much the trends of attacks can be grasped in this paper. We focus on the visibility of change-point-detection of port scan and measure the visibility of darknets with different address scales by using DTW distance. As a result, compared to a darknet with the same number of contiguous IP addresses, a distributed darknet with a large number of small distributed address blocks showed higher visibility for port scan change-point-detection. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | Darknet / Port scan / IPv4 / DTW / Small-scale darknets |
| Paper # | IA2022-43 |
| Date of Issue | 2022-11-14 (IA) |
| Conference Information | |
| Committee | IA |
|---|---|
| Conference Date | 2022/11/21(1days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | Bandai Civic Hall (Niigata) |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | Student Sessions, etc. (cosponsored by Committee on Internet Technology) |
| Chair | Tomoki Yoshihisa(Osaka Univ.) |
| Vice Chair | Yusuke Sakumoto(Kwansei Gakuin Univ.) / Yuichiro Hei(KDDI Research) / Hiroshi Yamamoto(Ritsumeikan Univ.) |
| Secretary | Yusuke Sakumoto(Osaka Univ.) / Yuichiro Hei(Kogakuin Univ.) / Hiroshi Yamamoto(Kyushu Inst. of Tech.) |
| Assistant | Daisuke Kotani(Kyoto Univ.) / Ryo Nakamura(Fukuoka Univ.) / Ryo Nakamura(Univ. of Tokyo) |
| Paper Information | |
| Registration To | Technical Committee on Internet Architecture |
|---|---|
| Language | JPN |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | The visibility of port scan traffic analysis in many small-scale darknets |
| Sub Title (in English) | |
| Keyword(1) | Darknet |
| Keyword(2) | Port scan |
| Keyword(3) | IPv4 |
| Keyword(4) | DTW |
| Keyword(5) | Small-scale darknets |
| 1st Author's Name | Kodai Mizutani |
| 1st Author's Affiliation | Kyoto University(Kyoto Univ.) |
| 2nd Author's Name | Daisuke Kotani |
| 2nd Author's Affiliation | Kyoto University(Kyoto Univ.) |
| 3rd Author's Name | Yasuo Okabe |
| 3rd Author's Affiliation | Kyoto University(Kyoto Univ.) |
| Date | 2022-11-21 |
| Paper # | IA2022-43 |
| Volume (vol) | vol.122 |
| Number (no) | IA-268 |
| Page | pp.pp.39-46(IA), |
| #Pages | 8 |
| Date of Issue | 2022-11-14 (IA) |