^ Top

NANOG Meeting Presentation Abstract

Tracking Global Threats with the Internet Motion Sensor
Meeting: NANOG32
Date / Time: 2004-10-19 11:30am - 12:00pm
Room: Grand Ballroom
Presenters: Speakers:
Michael Bailey, University of Michigan.
Evan Cooke, University of Michigan.
Danny McPherson, Arbor Networks.
Tim Battles, AT&T.
Abstract: As national utility infrastructures become intertwined with emerging global data networks, the stability and integrity of the two have become synonymous. This connection, while necessary, leaves network assets vulnerable to the rapidly moving threats of today\'s Internet, including distributed denial of service attacks, fast moving worms, and routing exploits. This presentation introduces the Internet Motion Sensor (IMS), a globally scoped Internet monitoring system whose goal is to measure, characterize, and track threats.



The IMS architecture is based on three novel components. First, a Distributed Monitoring Infrastructure increases visibility into global threats. Second, a Lightweight Active Responder provides enough interactivity that traffic on the same service can be differentiated independent of application semantics. Third, a Payload Signatures and Caching mechanism avoids recording duplicated payloads reducing overhead and assists in identifying new and unique payloads. We explore the benefits of this system in the context of a three-year deployment across multiple dark address blocks ranging in size from /24s to a /8. Data gathered from these deployments is used to demonstrate the ability of the IMS to capture and characterize recent activity, such as that on Sasser and Dabber Backdoors.
Files: pdfMichael Bailey Presentation(PDF)
youtubeTracking Global Threats with the Internet Motion Sensor
Sponsors: None.

Back to NANOG32 agenda.

NANOG32 Abstracts

  • Botnets
    Speakers:
    John Kristoff, Northwestern University;
  • BGP—The Movie
    Speakers:
    Geoff HustonAPNIC; .
    George MichaelsonAPNIC; .
    Philip SmithCisco Systems; .
  • BGP—The Movie
    Speakers:
    Geoff HustonAPNIC; .
    George MichaelsonAPNIC; .
    Philip SmithCisco Systems; .
  • BGP—The Movie
    Speakers:
    Geoff HustonAPNIC; .
    George MichaelsonAPNIC; .
    Philip SmithCisco Systems; .
  • Life and Times of J-Root
    Speakers:
    Piet BarberVerisign; .
    Matt LarsonVerisign; .
    Mark KostersVerisign; .
    Pete ToscanoVerisign; .
  • Life and Times of J-Root
    Speakers:
    Piet BarberVerisign; .
    Matt LarsonVerisign; .
    Mark KostersVerisign; .
    Pete ToscanoVerisign; .
  • Life and Times of J-Root
    Speakers:
    Piet BarberVerisign; .
    Matt LarsonVerisign; .
    Mark KostersVerisign; .
    Pete ToscanoVerisign; .
  • Life and Times of J-Root
    Speakers:
    Piet BarberVerisign; .
    Matt LarsonVerisign; .
    Mark KostersVerisign; .
    Pete ToscanoVerisign; .

 

^ Back to Top