Ruoming Pang, Vinod Yegneswaran, Paul Barford, Vern Paxson, Larry Peterson  Home/Search
Context Related
| wisc.edu/~vinod/radiationpaper.pdf Cached: PS.gz PS PDF This document uses CoBlitz to cache paper downloads. If your firewall is blocking outgoing connections to port 3125, you can use these links to download local copies.
Image Update HelpPS.gz PS PDF From: wisc.edu/anomaly (more) (Enter author homepages) |
Rate this article:      (best)Comment on this article |
Abstract: Monitoring any portion of the Internet address space reveals incessant activity. This holds even when monitoring traffic sent to unused addresses, which we term "background radiation." Background radiation reflects fundamentally nonproductive traffic, either malicious (flooding backscatter, scans for vulnerabilities, worms) or benign (misconfigurations). While the general presence of background radiation is well known to the network operator community, its nature has yet to be broadly... (Update)
Similar documents based on text:
0.4: Fusion and Filtering in Distributed Intrusion Detection.. - Barford, Jha, Yegneswara (2004) (Correct)
0.4: A High-level Programming Environment for Packet Trace.. - Pang, Paxson (2003) (Correct)
0.3: A Framework for Malicious Workload Generation - Sommers, Yegneswaran, Barford (2004) (Correct)
Related documents from co-citation: More All
5: Inferring Internet Denial-of-Service Activity - Moore, Voelker et al. - 2001
5: Code-Red: a case study on the spread and victims of an Internet worm - Moore, Shannon et al. - 2002
5: IEEE Security and Privacy (context) - Moore, Paxson et al. - 2003
BibTeX entry: (Update)
R. Pang, V. Yegneswaran, P. Barford, V. Paxson, and L. Peterson. Characteristics of Internet Background Radiation. In Proceedings of ACM Internet Measurement Conference, October, 2004. http://citeseer.ist.psu.edu/pang04characteristics.html More
@misc{ pang04characteristics,
author = "R. Pang and V. Yegneswaran and P. Barford and V. Paxson and L. Peterson",
title = "Characteristics of Internet Background Radiation",
text = "R. Pang, V. Yegneswaran, P. Barford, V. Paxson, and L. Peterson. Characteristics
of Internet Background Radiation. In Proceedings of ACM Internet Measurement
Conference, October, 2004.",
year = "2004",
url = "citeseer.ist.psu.edu/pang04characteristics.html" }
Citations (may not include all citations):270 Web server workload characterization: The search for invaria.. - Arlitt, Williamson - 1996
261 Wide area Internet traffic patterns and characteristics (context) - Thompson, Miller et al. - 1997
161 Empirically-derived analytic models of wide-area tcp connect.. - Paxson - 1994
140 Snort: Lightweight intrusion detection for networks (context) - Roesch - 1999
123 Bro: A system for detecting network intruders in real time - Paxson - 1999
113 Inferring internet denial of service activity - Moore, Voelker et al. - 2001
111 ACM Transactions on Computer Systems (context) - Kohler, Morris et al. - 2000
76 empirical workload model driving wide area TCPIP network sim.. - Caceres, Estrin et al. - 1992
74 Code red: A case study on the spread and victims of an inter.. - Moore, Shannon et al. - 2002
74 Internet quarantine: Requirements for containing self-propag.. - Moore, Shannon et al. - 2003
69 How to 0wn the Internet in Your Spare Time - Staniford, Paxson et al. - 2002
29 distributed worm signature detection (context) - Kim, Karp et al. - 2004
28 spread sapphireslammer worm (context) - Savage, Staniford et al. - 2003
23 Fast portscan detectionusing sequential hypothesis testing - Jung, Paxson et al. - 2004
23 Internet intrusions: Global characteristics and prevalence - Yegneswaran, Barford et al. - 2003
22 Inside the slammer worm (context) - Moore, Paxson et al. - 2003
18 Network telescopes: Observing small or distant security even.. (context) - Moore - 2002
16 Honeycomb--creating intrusion detection signatures using hon.. - Kreibich, Crowcroft - 2003
13 The Earlybird system for real-time detection of unknown worm.. (context) - Singh, Estan et al. - 2003
8 the design and use of internet sinks for network abuse monit.. - Yegneswaran, Barford et al. - 2004
4 Attack processes found on the internet (context) - Dacier, Pouget et al. - 2004
3 The SNORT network intrusion detection system (context) - Caswell, Roesch - 2004
3 The Honeyd Virtual Honeypot (context) - Provos - 2003
2 Creating arbitrary shellcode in unicode expanded strings (context) - Anley - 2002
2 BGPv4 Security Risk Assessment (context) - Greene - 2002
1 WebDAV buffer overflow vulnerability (context) - Windows - 2000
1 translate: f (context) - Focus - 2004
http://www.liutilities.com/products/wintaskspro/
http://securityresponse.symantec.com/avcenter/
http://www.sophos.com/virusinfo/analyses/
http://www.mynetwatchman.com/kb/security/articles/iraqiworm
http://www.opengroup.org/
http://www.synfin.net/papers/flowreplay.pdf
http://securityresponse.symantec.com/avcenter/venc/
http://www.securityfocus.com/bid/6666
http://www.lurhq.com/
http://www.snia.org/tech
http://securityresponse.symantec.com/
http://www.per.rcpt.to/lists/
http://www.sophos.com/virusinfo/analyses/w32xiboa.html
http://www.securityfocus.com/archive/1/347576
http://www.securityfocus.com/bid/8205
The graph only includes citing articles where the year of publication is known.
Documents on the same site (http://wail.cs.wisc.edu/anomaly.html): More
On the Design and Use of Internet Sinks for Network.. - Yegneswaran, Barford.. (2004) (Correct)
A Framework for Malicious Workload Generation - Sommers, Yegneswaran, Barford (2004) (Correct)
Fusion and Filtering in Distributed Intrusion Detection.. - Barford, Jha, Yegneswara (2004) (Correct)
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC