Lessons Learned from Operating a Large Network Telescope
Publikation: Beitrag in Buch/Konferenzbericht/Sammelband/Gutachten › Beitrag in Konferenzband › Beigetragen › Begutachtung
Beitragende
Abstract
Network telescopes (aka darknets) collect unsolicited Internet traffic (aka Internet background radiation or IBR), which includes benign and malicious scanning as well as artifacts of spoofed denial-of-service attacks and misconfigured software and hosts. Analysis of this traffic has revealed macroscopic insights into security-related events and global network dynamics such as outages. Operating a large-scale network telescope is challenging but often taken for granted, more so than in more mature scientific disciplines. We offer the first study documenting our experiences operating the UCSD Network Telescope, the largest and longest-operating network telescope supporting scientific research. We provide background on the history of the telescope, and focus on increasing operational challenges as the underlying network evolves. We develop and apply techniques to leverage third-party scanning activity to validate the integrity of the data, and to discover misconfigurations in the instrumentation. These insights are crucial for understanding measurement results, which we illustrate using concrete examples. We discuss how our findings generalize to support the expanding ecosystem of other passive techniques, such as honeypots, to track security phenomena.
Details
| Originalsprache | Englisch |
|---|---|
| Titel | Proceedings of ACM SIGCOMM |
| Herausgeber (Verlag) | Association for Computing Machinery (ACM) |
| Seiten | 826-841 |
| Seitenumfang | 16 |
| ISBN (elektronisch) | 9798400715242 |
| Publikationsstatus | Veröffentlicht - Aug. 2025 |
| Peer-Review-Status | Ja |
Konferenz
| Titel | 39th annual conference of the ACM Special Interest Group on Data Communication |
|---|---|
| Kurztitel | ACM SIGCOMM 2025 |
| Veranstaltungsnummer | 39 |
| Dauer | 8 - 11 September 2025 |
| Webseite | |
| Bekanntheitsgrad | Internationale Veranstaltung |
| Ort | São Francisco Convent |
| Stadt | Coimbra |
| Land | Portugal |
Externe IDs
| ORCID | /0000-0002-3825-2807/work/188859607 |
|---|---|
| Scopus | 105016161640 |
Schlagworte
Forschungsprofillinien der TU Dresden
- Informationstechnologien und Mikroelektronik - UCSD-NT, passive measurements, IPv4, darknet, research infrastructure, network telescope, operational experience
- Datenintensive Wissenschaften - UCSD-NT, passive measurements, IPv4, darknet, research infrastructure, network telescope, operational experience
DFG-Fachsystematik nach Fachkollegium
- Sicherheit und Verlässlichkeit - UCSD-NT, passive measurements, IPv4, darknet, research infrastructure, network telescope, operational experience
- Betriebs-, Kommunikations-, Datenbank- und verteilte Systeme - UCSD-NT, passive measurements, IPv4, darknet, research infrastructure, network telescope, operational experience
Fächergruppen, Lehr- und Forschungsbereiche, Fachgebiete nach Destatis
- Computer- und Kommunikationstechniken - UCSD-NT, passive measurements, IPv4, darknet, research infrastructure, network telescope, operational experience
Ziele für nachhaltige Entwicklung
- SDG 4 – Qualitativ hochwertige Bildung - UCSD-NT, passive measurements, IPv4, darknet, research infrastructure, network telescope, operational experience
- SDG 9 – Industrie, Innovation und Infrastruktur - UCSD-NT, passive measurements, IPv4, darknet, research infrastructure, network telescope, operational experience
ASJC Scopus Sachgebiete
- Computernetzwerke und -kommunikation - UCSD-NT, passive measurements, IPv4, darknet, research infrastructure, network telescope, operational experience
- Hardware und Architektur - UCSD-NT, passive measurements, IPv4, darknet, research infrastructure, network telescope, operational experience
- Software - UCSD-NT, passive measurements, IPv4, darknet, research infrastructure, network telescope, operational experience
Schlagwörter
- UCSD-NT, passive measurements, IPv4, darknet, research infrastructure, network telescope, operational experience