Monitoring Darknet Activities by Using Network Telescope

Abstract

Today, many hosts are connected to the Internet worldwide. Those hosts are intentionally or even accidentally targeted on a daily basis by malicious activities. Thus, it is essential to monitor Internet traffic to acquire the knowledge of the threats that are targeting computers and network systems. Such traffic is always tied to Darknet. Security experts initiated numerous approaches for monitoring traffic that includes malicious activities, and network telescopes were one of them. Network telescopes are valuable in the term of monitoring and gathering data associated with Internet attack activities. Analysis of traffic captured by network telescopes is an effective measure in characterizing evil traffic caused by worm propagation and distributed denial of service attacks. There has been limited work done in such an area. Thus we decided to elaborate more in the building, configuring and exploring the network telescope data. We had reviewed previously proposed telescopes and identified their strengths and weaknesses. We then suggested an enhanced version of the network telescope that will provide big data analysis, data mining, statistics and visualization and at last data simulation. Indexing Terms: Darknet, Network Telescope, Worm.

Date of Award	Dec 2017
Original language	American English
Supervisor	Chan Yeun (Supervisor)