Presentation 2022-11-21
The visibility of port scan traffic analysis in many small-scale darknets
Kodai Mizutani, Daisuke Kotani, Yasuo Okabe,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) Darknets are one of information sources to grasp a trend of cyber-attcks. While the demand for IPv4 addresses is high, the number of newly allocatable IPv4 addresses running out. Therefore, it could become difficult to maintain a large-scale darknet because more IP addresses may be requested to be assigned to users, rather than the darknets. So, we need to clarify how the reduction of size of the darknets affects the visibility, which is how much the trends of attacks can be grasped in this paper. We focus on the visibility of change-point-detection of port scan and measure the visibility of darknets with different address scales by using DTW distance. As a result, compared to a darknet with the same number of contiguous IP addresses, a distributed darknet with a large number of small distributed address blocks showed higher visibility for port scan change-point-detection.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Darknet / Port scan / IPv4 / DTW / Small-scale darknets
Paper # IA2022-43
Date of Issue 2022-11-14 (IA)

Conference Information
Committee IA
Conference Date 2022/11/21(1days)
Place (in Japanese) (See Japanese page)
Place (in English) Bandai Civic Hall (Niigata)
Topics (in Japanese) (See Japanese page)
Topics (in English) Student Sessions, etc. (cosponsored by Committee on Internet Technology)
Chair Tomoki Yoshihisa(Osaka Univ.)
Vice Chair Yusuke Sakumoto(Kwansei Gakuin Univ.) / Yuichiro Hei(KDDI Research) / Hiroshi Yamamoto(Ritsumeikan Univ.)
Secretary Yusuke Sakumoto(Osaka Univ.) / Yuichiro Hei(Kogakuin Univ.) / Hiroshi Yamamoto(Kyushu Inst. of Tech.)
Assistant Daisuke Kotani(Kyoto Univ.) / Ryo Nakamura(Fukuoka Univ.) / Ryo Nakamura(Univ. of Tokyo)

Paper Information
Registration To Technical Committee on Internet Architecture
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) The visibility of port scan traffic analysis in many small-scale darknets
Sub Title (in English)
Keyword(1) Darknet
Keyword(2) Port scan
Keyword(3) IPv4
Keyword(4) DTW
Keyword(5) Small-scale darknets
1st Author's Name Kodai Mizutani
1st Author's Affiliation Kyoto University(Kyoto Univ.)
2nd Author's Name Daisuke Kotani
2nd Author's Affiliation Kyoto University(Kyoto Univ.)
3rd Author's Name Yasuo Okabe
3rd Author's Affiliation Kyoto University(Kyoto Univ.)
Date 2022-11-21
Paper # IA2022-43
Volume (vol) vol.122
Number (no) IA-268
Page pp.pp.39-46(IA),
#Pages 8
Date of Issue 2022-11-14 (IA)