The Dark Side of the Internet

Presented at DeepSec 2013 „Secrets, Failures, and Visions“, Unknown date/time (Unknown duration).

Darknets (aka "network telescope") are used by security researchers as well as network and system engineers to gain information about traffic in a seemingly unused ("dark") address space of a network. Due to the fact that the darknet has no active services or hosts, no legitimate packets should enter it. Traffic to the darknet thus is caused e.g. by Malware or attackers which are scanning networks and trying to infect new hosts. This talk will focus on the analysis of the information collected using the darknet as well as the setup used. The motivaton for the initial setup will be elaborated and results/statistics of the metadata and packet analysis presented.

Presenters:

Links:

Similar Presentations: