02570nam a2200241   4500001000700000090001100007100004100018101000800059200013300067210002600200215002000226300018500246330156700431606003201998606003102030606003102061606003802092606001702130606002702147700002502174955001102199995011802210393692  a393692  a20160120d2015       y0pory50      ba  aeng  aUnderstanding and defending against internet infrastructures supporting cybercrime operationsbRecurso eletrónicofMaria Konte  aGeorgiac[s.n.]d2015  a1 CD-ROMd12 cm  aTese de Doutoramento apresentada à School of Computer Science do Georgia Institute of Technology, tendo como orientador Nick Feamster. Ficheiro de 2,82 MB em formato PDF (97 p.).  aI INTRODUCTION. 1.1 Introduction. 1.1.1 Challenges of defenses against cyber-criminal infrastructures. 1.1.2 Understanding malicious infrastructures and designing control plane based defenses. 1.1.3 Outline. 1.1.4 Bibliographic Notes. II RELATED WORK. 2.1 Measurement studies of FFSN [Fast Flux Service Networks]. 2.2 Defenses against FFSN and DNS-based cyber-crminal infrastructures. 2.3 Measurement studies and defenses against malicious networks. 2.4 Designing disincentives for cyber-criminal activities. III FAST FLUX SERVICE NETWORKS: DYNAMICS AND ROLES IN HOSTING ONLINE SCAMS. 3.1 Introduction. 3.2 Background. 3.2.1 Fast-Flux Mechanics. 3.3 Data. 3.3.1 Data Collection. 3.3.2 Postprocessing: Scam Campaigns. 3.3.3 Limitations. 3.4 Dynamics. 3.4.1 Rate of Change. 3.4.2 Rate of Accumulation. 3.4.3 Location of Change in DNS hierarchy. 3.5 Roles. 3.5.1 Location. 3.5.2 Sharing Across Campaigns. 3.6 Relationship to Blacklists. 3.7 Conclusion. IV RE-WIRING ACTIVITY OF MALICIOUS NETWORKS. 4.1 Introduction. 4.2 Data. 4.3 Results. 4.3.1 Re-Wiring Frequency. 4.3.2 Attachment Preference. 4.4 Recommendations and Future Work. 4.5 Conclusion. V ASWATCH: AN AS REPUTATION SYSTEM TOEXPOSE BULLETPROOF HOSTING ASES. 5.1 Introduction. 5.2 Background. 5.3 ASwatch. 5.3.1 System Overview. 5.3.2 Statistical Features. 5.3.3 System Operation. 5.4 Evaluation. 5.4.1 Data. 5.4.2 Experiment Setup. 5.4.3 Results. 5.4.4 Comparison to BGP Ranking. 5.5 Discussion. 5.6 Conclusion. VI CONCLUSION. 6.1 Summary of contributions. 6.2 Lessons learned and future work. REFERENCES.  aCRIME INFORMÁTICO9301395  aCRIME VIA INTERNET9322772  aREDE INFORMÁTICA9263197  aSEGURANÇA INFORMÁTICA9273163  aTESE9334284  aESTADOS UNIDOS9334103  aKONTEbMaria9357976  xOferta  104PJCD_276_00000000000000052022-06-066PJCD2769426156aPJcPJfPJ1CD276_19kPJCD276n2022-06-06o0rMOxOferta