Hackers topology matter geography: Mapping the dynamics of repeated system trespassing events networks

Amit Rechavi; Tamar Berenblum; David Maimon; Ido Sivan Sevilla

doi:10.1145/2808797.2808873

Hackers topology matter geography: Mapping the dynamics of repeated system trespassing events networks

Amit Rechavi, Tamar Berenblum, David Maimon, Ido Sivan Sevilla

Center for Internet Research

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

This study focuses on the spatial context of hacking to networks of Honey-pots. We investigate the relationship between topological positions and geographic positions of victimized computers and system trespassers. We've deployed research Honeypots on the computer networks of two academic institutions, collected information on successful brute force attacks (BFA) and system trespassing events (sessions), and used Social Network Analysis (SNA) techniques, to depict and understand the correlation between spatial attributes (IP addresses) and hacking networks' topology. We mapped and explored hacking patterns and found that geography might set the behavior of the attackers as well as the topology of hacking networks. The contribution of this study stems from the fact that there are no prior studies of geographical influences on the topology of hacking networks and from the unique usage of SNA to investigate hacking activities. Looking ahead, our study can assist policymakers in forming effective policies in the field of cybercrime.

Original language	English
Title of host publication	Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015
Editors	Jian Pei, Jie Tang, Fabrizio Silvestri
Publisher	Association for Computing Machinery, Inc
Pages	795-804
Number of pages	10
ISBN (Electronic)	9781450338547
DOIs	https://doi.org/10.1145/2808797.2808873
State	Published - 25 Aug 2015
Event	IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015 - Paris, France Duration: 25 Aug 2015 → 28 Aug 2015

Publication series

Name	Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015

Conference

Conference	IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015
Country/Territory	France
City	Paris
Period	25/08/15 → 28/08/15

Keywords

Cybersecurity
Cyberspace policies
Hacking
Hot-spots
SNA
Topology

ASJC Scopus subject areas

Computer Science Applications
Computer Networks and Communications

Access to Document

10.1145/2808797.2808873

Cite this

Rechavi, A., Berenblum, T., Maimon, D., & Sevilla, I. S. (2015). Hackers topology matter geography: Mapping the dynamics of repeated system trespassing events networks. In J. Pei, J. Tang, & F. Silvestri (Eds.), Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015 (pp. 795-804). (Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015). Association for Computing Machinery, Inc. https://doi.org/10.1145/2808797.2808873

Rechavi, Amit ; Berenblum, Tamar ; Maimon, David et al. / Hackers topology matter geography : Mapping the dynamics of repeated system trespassing events networks. Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015. editor / Jian Pei ; Jie Tang ; Fabrizio Silvestri. Association for Computing Machinery, Inc, 2015. pp. 795-804 (Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015).

@inproceedings{9be2d9cbcabd436c90ec6283f797e1ae,

title = "Hackers topology matter geography: Mapping the dynamics of repeated system trespassing events networks",

abstract = "This study focuses on the spatial context of hacking to networks of Honey-pots. We investigate the relationship between topological positions and geographic positions of victimized computers and system trespassers. We've deployed research Honeypots on the computer networks of two academic institutions, collected information on successful brute force attacks (BFA) and system trespassing events (sessions), and used Social Network Analysis (SNA) techniques, to depict and understand the correlation between spatial attributes (IP addresses) and hacking networks' topology. We mapped and explored hacking patterns and found that geography might set the behavior of the attackers as well as the topology of hacking networks. The contribution of this study stems from the fact that there are no prior studies of geographical influences on the topology of hacking networks and from the unique usage of SNA to investigate hacking activities. Looking ahead, our study can assist policymakers in forming effective policies in the field of cybercrime.",

keywords = "Cybersecurity, Cyberspace policies, Hacking, Hot-spots, SNA, Topology",

author = "Amit Rechavi and Tamar Berenblum and David Maimon and Sevilla, {Ido Sivan}",

year = "2015",

month = aug,

day = "25",

doi = "10.1145/2808797.2808873",

language = "English",

series = "Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015",

publisher = "Association for Computing Machinery, Inc",

pages = "795--804",

editor = "Jian Pei and Jie Tang and Fabrizio Silvestri",

booktitle = "Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015",

note = "IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015 ; Conference date: 25-08-2015 Through 28-08-2015",

}

Rechavi, A, Berenblum, T, Maimon, D & Sevilla, IS 2015, Hackers topology matter geography: Mapping the dynamics of repeated system trespassing events networks. in J Pei, J Tang & F Silvestri (eds), Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015. Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015, Association for Computing Machinery, Inc, pp. 795-804, IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015, Paris, France, 25/08/15. https://doi.org/10.1145/2808797.2808873

Hackers topology matter geography: Mapping the dynamics of repeated system trespassing events networks. / Rechavi, Amit; Berenblum, Tamar; Maimon, David et al.
Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015. ed. / Jian Pei; Jie Tang; Fabrizio Silvestri. Association for Computing Machinery, Inc, 2015. p. 795-804 (Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Hackers topology matter geography

T2 - IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015

AU - Rechavi, Amit

AU - Berenblum, Tamar

AU - Maimon, David

AU - Sevilla, Ido Sivan

PY - 2015/8/25

Y1 - 2015/8/25

N2 - This study focuses on the spatial context of hacking to networks of Honey-pots. We investigate the relationship between topological positions and geographic positions of victimized computers and system trespassers. We've deployed research Honeypots on the computer networks of two academic institutions, collected information on successful brute force attacks (BFA) and system trespassing events (sessions), and used Social Network Analysis (SNA) techniques, to depict and understand the correlation between spatial attributes (IP addresses) and hacking networks' topology. We mapped and explored hacking patterns and found that geography might set the behavior of the attackers as well as the topology of hacking networks. The contribution of this study stems from the fact that there are no prior studies of geographical influences on the topology of hacking networks and from the unique usage of SNA to investigate hacking activities. Looking ahead, our study can assist policymakers in forming effective policies in the field of cybercrime.

AB - This study focuses on the spatial context of hacking to networks of Honey-pots. We investigate the relationship between topological positions and geographic positions of victimized computers and system trespassers. We've deployed research Honeypots on the computer networks of two academic institutions, collected information on successful brute force attacks (BFA) and system trespassing events (sessions), and used Social Network Analysis (SNA) techniques, to depict and understand the correlation between spatial attributes (IP addresses) and hacking networks' topology. We mapped and explored hacking patterns and found that geography might set the behavior of the attackers as well as the topology of hacking networks. The contribution of this study stems from the fact that there are no prior studies of geographical influences on the topology of hacking networks and from the unique usage of SNA to investigate hacking activities. Looking ahead, our study can assist policymakers in forming effective policies in the field of cybercrime.

KW - Cybersecurity

KW - Cyberspace policies

KW - Hacking

KW - Hot-spots

KW - SNA

KW - Topology

UR - http://www.scopus.com/inward/record.url?scp=84962579310&partnerID=8YFLogxK

U2 - 10.1145/2808797.2808873

DO - 10.1145/2808797.2808873

M3 - Conference contribution

AN - SCOPUS:84962579310

T3 - Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015

SP - 795

EP - 804

BT - Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015

A2 - Pei, Jian

A2 - Tang, Jie

A2 - Silvestri, Fabrizio

PB - Association for Computing Machinery, Inc

Y2 - 25 August 2015 through 28 August 2015

ER -

Rechavi A, Berenblum T, Maimon D, Sevilla IS. Hackers topology matter geography: Mapping the dynamics of repeated system trespassing events networks. In Pei J, Tang J, Silvestri F, editors, Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015. Association for Computing Machinery, Inc. 2015. p. 795-804. (Proceedings of the 2015 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2015). doi: 10.1145/2808797.2808873

Hackers topology matter geography: Mapping the dynamics of repeated system trespassing events networks

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this