tackling network abuse at its roots tobias knecht

14
tackling network abuse at its roots Tobias Knecht

Upload: lydia-thornton

Post on 13-Dec-2015

212 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Tackling network abuse at its roots Tobias Knecht

tack l i ng ne twork abuse a t i t s roo ts

Tobias Knecht

Page 2: Tackling network abuse at its roots Tobias Knecht

X-ARFExtended Abuse Reporting

Format

Page 3: Tackling network abuse at its roots Tobias Knecht

What it is?

Page 4: Tackling network abuse at its roots Tobias Knecht

Why do we need it?

Page 5: Tackling network abuse at its roots Tobias Knecht

How does it look like?

Page 6: Tackling network abuse at its roots Tobias Knecht

Where do we want to go?

Page 7: Tackling network abuse at its roots Tobias Knecht

Use Cases

Page 8: Tackling network abuse at its roots Tobias Knecht

Use Cases

Attack Reporting

Abusive Content Reporting

Law Enforcement

Sinkhole Cleanups

... and many more

Page 9: Tackling network abuse at its roots Tobias Knecht

Sinkholes

GrumBlack EnergyAlina

Page 10: Tackling network abuse at its roots Tobias Knecht
Page 11: Tackling network abuse at its roots Tobias Knecht

How do we report?

• Fetching logfiles on an hourly base

• Uniq IP addresses

• Package all information into X-ARF

• Lookup correct abuse contact

• Send report

Page 12: Tackling network abuse at its roots Tobias Knecht

Decrease of >25%in less than 8 weeks

Page 13: Tackling network abuse at its roots Tobias Knecht

Call for Action

Check out http://x-arf.org

Contribute ideas, help shaping it!

„Dirty“ Space? Sinkholes? Attack-Data?

Talk to us, we are happy to report it!

Page 14: Tackling network abuse at its roots Tobias Knecht

Tobias KnechtCEO

+49 (0)721 / 75 40 65 - [email protected]

http://www.abusix.comtwitter: @abusix

Thank You for Your Attention!