Abstract
We investigated how Patch Tuesday affects the volume and characteristics of malicious and unwanted traffic as observed by a large IPv4 (/8) darkspace monitor over the first six months of 2012. We did not discover significant changes in overall traffic volume following Patch Tuesday, but we found a significant increase of the number of active hosts sending to our darkspace monitor the day after Patch Tuesday for all six investigated months. Our early results suggest the effects of Patch Tuesday are worth deeper investigation. Detecting time intervals during which new sources become active can help tune sampling methods toward activity periods that likely contain more interesting information (i.e., many new malicious sources) than other time periods.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
UCSD Network Telescope (2010), http://www.caida.org/data/passive/network_telescope.xml
Aben, E.: Conficker/Conflicker/Downadup as seen from the UCSD Network Telescope. Technical report, CAIDA (February 2009), http://www.caida.org/research/security/ms08-067/conficker.xml
Brownlee, N.: One-way Traffic Monitoring with iatmon. In: Taft, N., Ricciato, F. (eds.) PAM 2012. LNCS, vol. 7192, pp. 179–188. Springer, Heidelberg (2012)
CAIDA. Patch Tuesday Dataset (2012), http://www.caida.org/data/passive/telescope-patch-tuesday.xml
Alistair King. Corsaro (October 2012), http://www.caida.org/tools/measurement/corsaro/
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2013 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Zseby, T., King, A., Brownlee, N., Claffy, K.C. (2013). The Day after Patch Tuesday: Effects Observable in IP Darkspace Traffic. In: Roughan, M., Chang, R. (eds) Passive and Active Measurement. PAM 2013. Lecture Notes in Computer Science, vol 7799. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-36516-4_32
Download citation
DOI: https://doi.org/10.1007/978-3-642-36516-4_32
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-36515-7
Online ISBN: 978-3-642-36516-4
eBook Packages: Computer ScienceComputer Science (R0)