Skip to main content
SpringerLink
Log in

The Day after Patch Tuesday: Effects Observable in IP Darkspace Traffic

  • Conference paper
Passive and Active Measurement (PAM 2013)

Part of the book series: Lecture Notes in Computer Science ((LNCCN,volume 7799))

Included in the following conference series:

Abstract

We investigated how Patch Tuesday affects the volume and characteristics of malicious and unwanted traffic as observed by a large IPv4 (/8) darkspace monitor over the first six months of 2012. We did not discover significant changes in overall traffic volume following Patch Tuesday, but we found a significant increase of the number of active hosts sending to our darkspace monitor the day after Patch Tuesday for all six investigated months. Our early results suggest the effects of Patch Tuesday are worth deeper investigation. Detecting time intervals during which new sources become active can help tune sampling methods toward activity periods that likely contain more interesting information (i.e., many new malicious sources) than other time periods.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 54.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 72.00
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. UCSD Network Telescope (2010), http://www.caida.org/data/passive/network_telescope.xml

  2. Aben, E.: Conficker/Conflicker/Downadup as seen from the UCSD Network Telescope. Technical report, CAIDA (February 2009), http://www.caida.org/research/security/ms08-067/conficker.xml

  3. Brownlee, N.: One-way Traffic Monitoring with iatmon. In: Taft, N., Ricciato, F. (eds.) PAM 2012. LNCS, vol. 7192, pp. 179–188. Springer, Heidelberg (2012)

    Chapter  Google Scholar 

  4. CAIDA. Patch Tuesday Dataset (2012), http://www.caida.org/data/passive/telescope-patch-tuesday.xml

  5. Alistair King. Corsaro (October 2012), http://www.caida.org/tools/measurement/corsaro/

Download references

Author information

Authors and Affiliations

  1. Fraunhofer Institute FOKUS, 10589, Berlin, Germany

    Tanja Zseby

  2. CAIDA, UCSD, San Diego, CA, 92093, USA

    Tanja Zseby, Alistair King, Nevil Brownlee & K C Claffy

  3. The University of Auckland, Auckland, New Zealand

    Nevil Brownlee

Authors
  1. Tanja Zseby
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Alistair King
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Nevil Brownlee
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. K C Claffy
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. School of Mathematical Sciences, University of Adelaide, Innova21 Building, 5005, Adelaide, SA, Australia

    Matthew Roughan

  2. Department of Computing, The Hong Kong Polytechnic University, Hunghom, Kowloon, Hong Kong SAR, China

    Rocky Chang

Rights and permissions

Reprints and permissions

Copyright information

© 2013 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Zseby, T., King, A., Brownlee, N., Claffy, K.C. (2013). The Day after Patch Tuesday: Effects Observable in IP Darkspace Traffic. In: Roughan, M., Chang, R. (eds) Passive and Active Measurement. PAM 2013. Lecture Notes in Computer Science, vol 7799. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-36516-4_32

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-36516-4_32

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-36515-7

  • Online ISBN: 978-3-642-36516-4

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation