Uncovering network tarpits with degreaser
Uncovering network tarpits with degreaser
复制标题
使用除油剂揭开网络沥青坑
DOI：
10.1145/2664243.2664285
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
A. Dainotti
中科院分区：
文献类型：
--
作者：
L. Alt;R. Beverly;A. Dainotti
网络篷布可以伪装网络上的许多假宿主和慢速的网络扫描仪，是防御性网络涉及的一种形式为了在受控的环境中验证我们的工具，我们使用学位者进行互联网范围的扫描。行为。篷布，从而将栏上的栏提高为操作安全机制。
Network tarpits, whereby a single host or appliance can masquerade as many fake hosts on a network and slow network scanners, are a form of defensive cyber-deception. In this work, we develop degreaser, an efficient fingerprinting tool to remotely detect tarpits. In addition to validating our tool in a controlled environment, we use degreaser to perform an Internet-wide scan. We discover tarpits of non-trivial size in the wild (prefixes as large as/16), and characterize their distribution and behavior. We then show how tarpits pollute existing network measurement surveys that are tarpit-naïve, e.g. Internet census data, and how degreaser can improve the accuracy of such surveys. Lastly, our findings suggest several ways in which to advance the realism of current network tarpits, thereby raising the bar on tarpits as an operational security mechanism.