A Model for Network Telescope on White IP Address Space<br/>

Please enable javascript in your browser.

A Model for Network Telescope on White IP Address Space

1012 Viewed

Type of Document: M.Sc. Thesis
Language: Farsi
Document No: 42722 (19)
University: Sharif University of Technology
Department: Computer Engineering
Advisor(s): Kharrazi, Mehdi
Abstract:
Network Telescopes are used to extract security features of large a?a?s targeted large net-works.In this method all tra?cs received targeted to an unused address blo? are processedto ?nd useful informations about descriptive parameters of work propagation.Currently all resear?es are focused on dark addresses or unused address blo?s, in this re-sear? the idea is generalized to cover used and white address blo?s. Also the structure ofnetwork telescope is de?ned with a new manner whi?added more details to prediction andestimation methods. To extract security features of a?a?events, a newmethod have been introduced for inferenceabout a?a? parameters. ?e proposed method may be used to predict and correct accumu-lated parameters of network a?a?s. ?e model is based on a self propagating agent modelsseparating scanning strategy frompropagation pa?ern. ?is model include peer to peer com-munication between nodes and may be used for any worm with di?erent strategy.As a demonstration we have used the model to predict probability of infection of wi?y wormover internet. We have found an underestimation in previous resear? about number of in-fected worms
Keywords:
Network Security ; Network Telescope