| | |
Summary: De-anonymizing the Internet Using Unreliable IDs
Yinglian Xie, Fang Yu, and Martín Abadi
Microsoft Research Silicon Valley
ABSTRACT
Today's Internet is open and anonymous. While it permits free
traffic from any host, attackers that generate malicious traffic can-
not typically be held accountable. In this paper, we present a sys-
tem called HostTracker that tracks dynamic bindings between hosts
and IP addresses by leveraging application-level data with unreli-
able IDs. Using a month-long user login trace from a large email
provider, we show that HostTracker can attribute most of the activ-
ities reliably to the responsible hosts, despite the existence of dy-
namic IP addresses, proxies, and NATs. With this information, we
are able to analyze the host population, to conduct forensic analy-
sis, and also to blacklist malicious hosts dynamically.
Categories and Subject Descriptors
C.2.0 [Computer Communication Networks]: General--secu-
rity and protection; C.2.3 [Computer Communication Networks]:
Network Operations--network management
General Terms
|
