A Comprehensive Survey of Recent Internet Measurement Techniques for Cyber Security
A Comprehensive Survey of Recent Internet Measurement Techniques for Cyber Security
复制标题
DOI：
10.1016/j.cose.2023.103123
复制
发表时间：
2023-02-08
影响因子：
5.6
通讯作者：
Bou-Harb, Elias
中科院分区：
文献类型：
--
作者：
Pour, Morteza Safaei;Naderb, Christelle;Bou-Harb, Elias
随着互联网已转变为关键基础设施，社会对其安全漏洞变得更加脆弱。尽管工业界、政府和学术界为解决其中许多漏洞付出了巨大努力，但网络安全攻击在强度、多样性和影响方面持续增加。因此，调查当前的网络安全威胁、评估相应防御措施的部署程度以及评估风险缓解工作的有效性就变得很直观。以合理的方式解决这些问题需要通过众多互联网测量技术收集和分析大规模的实证数据。尽管此类测量能够产生全面且可靠的见解，但这样做包含复杂的程序，涉及开发新的方法以确保准确性和完整性。因此，必须对近期为网络安全开发的互联网测量方法进行系统研究，以便能够从多个有利视角进行全面研究，关联多个数据源，并有可能将过去成功的技术应用于较新的问题。不幸的是，进行这样的研究具有挑战性，因为相关文献非常分散。在很大程度上，这是由于每项研究工作仅关注互联网测量领域众多组成部分中的一小部分。此外，据我们所知，没有研究对这一关键研究领域进行深入考察以促进未来的发展。为了弥补这些差距，我们探讨了将互联网测量技术用于网络安全的所有相关方面，从特定应用领域内的威胁到威胁本身。我们从两个维度对与网络安全相关的互联网测量研究进行了分类。一个维度涉及互联网生态系统的众多垂直层（和组件），另一个维度涉及内部正常功能与互联网和现实世界中外部各方的负面影响。还从测量技术、范围、测量规模、视角规模以及所采用的分析方法等方面对所收集的研究进行了全面比较。最后，详细阐述了进行有效互联网测量的障碍以及可能的未来研究方向。(R) 2023作者。由爱思唯尔有限公司出版。这是一篇在CC BY许可（http://creativecommons.org/licenses/by/4.0/）下的开放获取文章
As the Internet has transformed into a critical infrastructure, society has become more vulnerable to its security flaws. Despite substantial efforts to address many of these vulnerabilities by industry, gov-ernment, and academia, cyber security attacks continue to increase in intensity, diversity, and impact. Thus, it becomes intuitive to investigate the current cyber security threats, assess the extent to which corresponding defenses have been deployed, and evaluate the effectiveness of risk mitigation efforts. Ad-dressing these issues in a sound manner requires large-scale empirical data to be collected and analyzed via numerous Internet measurement techniques. Although such measurements can generate comprehen-sive and reliable insights, doing so encompasses complex procedures involving the development of novel methodologies to ensure accuracy and completeness. Therefore, a systematic examination of recently developed Internet measurement approaches for cyber security must be conducted to enable thorough studies that employ several vantage points, correlate multiple data sources, and potentially leverage past successful techniques for more recent issues. Unfortunately, performing such an examination is challeng-ing, as the literature is highly scattered. In large part, this is due to each research effort only focusing on a small portion of the many constituent parts of the Internet measurement domain. Moreover, to the best of our knowledge, no studies have offered an in-depth examination of this critical research domain in order to promote future advancements. To bridge these gaps, we explore all pertinent facets of utiliz-ing Internet measurement techniques for cyber security, ranging from threats within specific application domains to threats themselves. We provide a taxonomy of cyber security-related Internet measurement studies across two dimensions. One dimension relates to the many vertical layers (and components) of the Internet ecosystem, while the other relates to internal normal functions vs. the negative impact of external parties in the Internet and physical world. A comprehensive comparison of the gathered studies is also offered in terms of measurement technique, scope, measurement size, vantage size, and the anal-ysis approach that was leveraged. Finally, a discussion of the roadblocks to performing effective Internet measurements and possible future research directions is elaborated.(R) 2023 The Author(s). Published by Elsevier Ltd. This is an open access article under the CC BY license (http://creativecommons.org/licenses/by/4.0/)