网数据分析合作协会.ppt

Quantitative Network Security Analysis We expect to be able to measure the vast majority of large-scale Internet attacks and capture global DoS, worm, and port scan activity on an ongoing basis. 我们希望能测量大规模的互联网攻击的绝大部分，并且捕捉到全球的DoS攻击，蠕虫和对端口扫描活动。 * Quantitative Network Security Analysis We plan to extend our backscatter algorithms and measurement infrastructure to track Internet attacks in real-time and actively probe victimized hosts to understand the impact of these attacks, the distribution of various vulnerabilities, and the efficacy of employed security measures. 我们计划把我们的背向散射算法和测量结构扩展到实时追踪互联网攻击，以及主动探测受到攻击的主机来了解这些攻击的影响，各种弱点的分布，和部署的安全措施的效果。 * Quantitative Network Security Analysis Finally, we will modify our monitors to redirect a subset of packets to simulated hosts (a so-called honeynet) to automatically identify and characterize new worms as they emerge. 我们还计划修改监控器，重定向一些包到模拟主机（所谓的“honeynet”），在新的蠕虫刚出现的时候就自动识别和描述它们。 * Quantitative Network Security Analysis The potential impact of this proposal is the creation of an empirical dataset that describes large-scale attacks across the global Internet. 我们还会创建一个经验数据集，描述全球互联网的大规模攻击。 * Quantitative Network Security Analysis Moreover, the real-time nature of this dataset could be widely valuable for operationally detecting, tracking, and characterizing large-scale threats as they occur. 此外，这个数据集的实时特性会广泛的对实际的探测、跟踪和描述大规模威胁有价值。 * Quantitative Network Security Analysis Given ongoing requests from government, industry, and academia that we receive for our preliminary data, we believe that there is keen, widespread interest for the large-scale data that we propose to create. 有了政府、工业界和学术界的要求，我们收到了初步的数据，我们相信对我们要创建的大规模数据会有急切的广泛传播的兴趣。 * Internet Atlas Project（2001--2004） * Internet Atlas Project（2001--2004） * Internet Atlas Project（2001--2004） * Projects ipnc (Inter-Provider Notification Channel) Analysis Visualization of BGP Connectivity Among Autonomous Systems NCS: Routing Analysis and Peering Policy for