Modeling malicious domain name take-down dynamics: Why eCrime pays
Modeling malicious domain name take-down dynamics: Why eCrime pays
复制标题
对恶意域名删除动态进行建模：为什么 eCrime 会付费
DOI：
10.1109/ecrs.2013.6805779
复制
发表时间：
2013
期刊：
影响因子：
--
通讯作者：
Jonathan M. Spring
中科院分区：
文献类型：
--
作者：
Jonathan M. Spring
域名推动了互联网的普遍使用。犯罪分子和对手也将域名用于他们的企业。防御者竞相删除或阻止此类恶意域。这是互联网上一个需要全面衡量的复杂空间，因为恶意行为者试图隐藏，防御者不喜欢共享数据或方法，而且公开的数据格式也不一致。本文使用兰彻斯特战斗方程的修改，在大型分散网络上推导出了这种竞争的临时模型。该模型适用于已知的互联网上恶意域活动的当前状态。该模型与当前发表的研究相一致，并根据模型的一般动态提供了对可能策略和限制的更全面的描述。当考虑到互联网所受的经济现实和物理定律时，该模型表明，当前删除恶意域名的方法是不可持续的，注定会被淘汰。然而，对当前方法进行一些有效的技术、政策和法律修改，例如预先填充观察名单、对注册人的注册的限制以及国际合作。结果表明，防御者不应期望在不采用新的数字策略并在物理世界中部署新规则的情况下消除或显着减少恶意域名的使用。
Domain names drive the ubiquitous use of the Internet. Criminals and adversaries also use domain names for their enterprise. Defenders compete to remove or block such malicious domains. This is a complicated space on the Internet to measure comprehensively, as the malicious actors attempt to hide, the defenders do not like to share data or methods, and what data is public is not consistently formatted. This paper derives an ad hoc model of this competition on large, decentralized networks using a modification of Lanchester's equations for combat. The model is applied to what is known of the current state of malicious domain activity on the Internet. The model aligns with currently published research, and provides a more comprehensive description of possible strategies and limitations based on the general dynamics of the model. When taken with the economic realities and physical laws to which the Internet is bound, the model demonstrates that the current approach to removing malicious domain names is unsustainable and destined for obsolescence. However, there are technical, policy, and legal modifications to the current approach that would be effective, such as preemptively populating watch lists, limits on a registrant's registrations, and international cooperation. The results indicate that the defenders should not expect to eliminate or significantly reduce malicious domain name usage without employing new digital tactics and deploying new rules in the physical world.
互联网互联生态系统的弹性
DOI：
--
发表时间：
--
期刊：
--
影响因子：
--
作者：
Ross Anderson (Author)
通讯作者：
Ross Anderson (Author)