Home

About

Advanced Search

Browse by Discipline

Scientific Societies

E-print Alerts

Add E-prints

E-print Network
FAQHELPSITE MAPCONTACT US


  Advanced Search  

 
Finding and Analyzing Evil Cities on the Internet Matthijs G.T. van Polen, Giovane C. M. Moura, and Aiko Pras
 

Summary: Finding and Analyzing Evil Cities on the Internet
Matthijs G.T. van Polen, Giovane C. M. Moura, and Aiko Pras
Centre for Telematics and Information Technology (CTIT)
Faculty of Electrical Engineering, Mathematics
and Computer Science (EEMCS)
Design and Analysis of Communications Systems (DACS)
Enschede, The Netherlands
matthijs@vanpolen.biz, {g.c.m.moura, a.pras} @utwente.nl
Abstract. IP Geolocation is used to determine the geographical location of In-
ternet users based on their IP addresses. When it comes to security, most of the
traditional geolocation analysis is performed at country level. Since countries
usually have many cities/towns of different sizes, it is expected that they behave
differently when performing malicious activities. Therefore, in this paper we re-
fine geolocation analysis to the city level. The idea is to find the most dangerous
cities on the Internet and observe how they behave. This information can then
be used by security analysts to improve their methods and tools. To perform this
analysis, we have obtained and evaluated data from a real-world honeypot net-
work of 125 hosts and from production e-mail servers.
Keywords: Geographical Analysis, Bad Neighborhoods, Internet Geolocation,
IP Geolocation, Spam, Network Attacks, Honeypots

  

Source: Al Hanbali, Ahmad - Department of Applied Mathematics, Universiteit Twente

 

Collections: Engineering