Fighting Coordinated Attackers with Cross-Organizational Information Sharing

نویسندگان

  • Mark Allman
  • Ethan Blanton
  • Vern Paxson
  • Scott Shenker
چکیده

In this paper we propose an architecture for using crossorganization information sharing to identify members of a group of hosts enslaved for malicious purposes on the Internet. We root our system in so-called “detectives”— savvy network monitors like sophisticated intrusion detection systems or honeyfarms that have a deep understanding of malicious behavior. We augment information from these detectives with observations from a large array of “witnesses” that are already in-place at many locations in the network. These witnesses are not savvy enough to understand that a particular behavior is malicious, but their simple factual observations can be shared with a detective in order to form a broad picture of a group of bad actors. A key aspect of the system is the design of a lightweight mechanism to reliably share enough information between detectives and witnesses to form an understanding of a group of bad actors without sharing more information than necessary, in order to address privacy and competitive concerns.

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

A Procurement-distribution Coordination Model in Humanitarian Supply Chain Using the Information-sharing Mechanism

The coordination problem of relief items’ distribution operations is essential in humanitarian relief chains. If the coordination is proper, it will improve the response phase to the crisis. In order to improve the coordination in humanitarian relief chains, distribution and warehousing operations of relief items were outsourced to the third-party logistics. In this paper, the procurement-distr...

متن کامل

Coordination of Information Sharing and Cooperative Advertising in a Decentralized Supply Chain with Competing Retailers Considering Free Riding Behavior

This paper studies a decentralized supply chain in which a manufacturer sells a common generic product through two traditional and online retailers under free riding market. We assume that the traditional retailer provides the value added services but the online retailer does not. Factors such as retail prices, local advertising of the retailers, global advertising of the manufacturer and servi...

متن کامل

The effect of organizational climate and knowledge sharing on the innovative behavior of employees in knowledge-based companies

Purpose. The ultimate goal of innovative behavior is to improve performance of the individual, group, and ultimately organization all together. Many factors are influential in the realization of innovative behavior of employees of an organization. In this study, the influence of two factors of organizational climate and knowledge sharing has been reflected. Method. The study uses an applied des...

متن کامل

تأثیر سیستم‌های اطلاعاتی منابع انسانی بر اشتراک دانش با میانجیگری فرهنگ‌سازمانی (موردمطالعه: شعب بانک ملت شیراز)

The main purpose of this study is to investigate the effect of human resources information systems on knowledge sharing through the mediation of organizational culture in Branches of Mellat Bank in Shiraz city. In this study, the key indicators for each variable of the study (human resources information systems, knowledge sharing and knowledge-based organizational culture) was given. then, they...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

عنوان ژورنال:

دوره   شماره 

صفحات  -

تاریخ انتشار 2006