Show simple item record

dc.contributor.authorAlt, Lance
dc.contributor.authorBeverly, Robert
dc.contributor.authorDainotti, Alberto
dc.dateDecember 8-12, 2014
dc.date.accessioned2015-08-28T17:39:28Z
dc.date.available2015-08-28T17:39:28Z
dc.date.issued2014-12
dc.identifier.citationACSAC ’14, December 08–12, 2014, New Orleans, LA, USAen_US
dc.identifier.urihttp://hdl.handle.net/10945/46358
dc.descriptionThe article of record as published may be located at http://dx.doi.org/ 10.1145/2664243.2664285en_US
dc.descriptionIncludes article and presentation.en_US
dc.description.abstractNetwork tarpits, whereby a single host or appliance can masquerade as many fake hosts on a network and slow network scanners, are a form of defensive cyber-deception. In this work, we develop degreaser, an efficient fingerprinting tool to remotely detect tarpits. In addition to validating our tool in a controlled environment, we use degreaser to perform an Internet-wide scan. We discover tarpits of non-trivial size in the wild (prefixes as large as /16), and characterize their distribution and behavior. We then show how tarpits pollute existing network measurement surveys that are tarpit-na¨ıve, e.g. Internet census data, and how degreaser can improve the accuracy of such surveys. Lastly, our findings suggest several ways in which to advance the realism of current network tarpits, thereby raising the bar on tarpits as an operational security mechanism.en_US
dc.description.sponsorshipThis work supported in part by the Department of Homeland Security (DHS) under contract N66001-2250-58231 and by U.S. NSF grant CNS-1228994.en_US
dc.rightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.en_US
dc.titleUncovering Network Tarpits with Degreaseren_US
dc.typeArticleen_US
dc.typePresentationen_US
dc.contributor.departmentComputer Scienceen_US
dc.subject.authorTarpitsen_US
dc.subject.authorInternet Censusen_US
dc.subject.authorSticky Honeypoten_US
dc.subject.authorDeceptionen_US


Files in this item

Thumbnail
Thumbnail

This item appears in the following Collection(s)

Show simple item record