Dynamic IP Addresses

• Idea: How can we tell how many infected computers as opposed to IP addresses?

• Motivation: Max of ~180,000 unique IPs seen in any 2 hour period, but more than 4 million across ~a week.

• This DHCP effect can produce skewed statistics for certain measures, especially over long time periods

Previous slide

Next slide

Back to first slide

View graphic version