| Presentation | 2018-09-07 A Study of Scanning Hosts Classification Mechanism in IP Backbone Networks Yukihiro Togari, Hisashi Kojima, Takeshi Kuwahara, |
|---|---|
| PDF Download Page |  PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | We have researched a lightweight scan detection mechanism in the IP backbone networks. However, the existing mechanism cannot determine which malware causes scans, it is hard to give priority to which infected host we should cope with. In this paper, we propose a novel classification method of the infected hosts in order to specify kind of malwares in the IP backbone networks. In the proposed method, the infected hosts are grouped into some clusters with similar characteristics of scan information such as the number of destination addresses, kind of protocols and port numbers. Network operators are easily able to distinguish the infected hosts with high risk and cope with them in advance. We show the efficiency of the proposed method by simulation. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | Network Security / Clustering / Traffic Analysis |
| Paper # | NS2018-102 |
| Date of Issue | 2018-08-30 (NS) |
| Conference Information | |
| Committee | IN / NS / CS |
|---|---|
| Conference Date | 2018/9/6(2days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | Research Institute of Electrical Communication, Tohoku Univ. |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | Session Management (SIP/IMS), Interoperability/Standardization, NGN/NwGN/Future Networks, Cloud/Data Center Networks, SDN (OpenFlow, etc.)/NFV, IPv6, Machine Learning, etc. |
| Chair | Takuji Kishida(NTT-AT) / Yoshikatsu Okazaki(NTT) / Hidenori Nakazato(Waseda Univ.) |
| Vice Chair | Kenji Ishida(Hiroshima City Univ.) / Akihiro Nakao(Univ. of Tokyo) / Jun Terada(NTT) |
| Secretary | Kenji Ishida(KDDI Research) / Akihiro Nakao(KDDI Research) / Jun Terada(NTT) |
| Assistant | / Kenichi Kashibuchi(NTT) / Kazutaka Hara(NTT) / Kentaro Toyoda(Keio Univ.) |
| Paper Information | |
| Registration To | Technical Committee on Information Networks / Technical Committee on Network Systems / Technical Committee on Communication Systems |
|---|---|
| Language | JPN |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | A Study of Scanning Hosts Classification Mechanism in IP Backbone Networks |
| Sub Title (in English) | |
| Keyword(1) | Network Security |
| Keyword(2) | Clustering |
| Keyword(3) | Traffic Analysis |
| 1st Author's Name | Yukihiro Togari |
| 1st Author's Affiliation | nippon telegraph and telephone corporation(NTT) |
| 2nd Author's Name | Hisashi Kojima |
| 2nd Author's Affiliation | nippon telegraph and telephone corporation(NTT) |
| 3rd Author's Name | Takeshi Kuwahara |
| 3rd Author's Affiliation | nippon telegraph and telephone corporation(NTT) |
| Date | 2018-09-07 |
| Paper # | NS2018-102 |
| Volume (vol) | vol.118 |
| Number (no) | NS-206 |
| Page | pp.pp.83-88(NS), |
| #Pages | 6 |
| Date of Issue | 2018-08-30 (NS) |