The LOBSTER Project: Passive Internet Traffic Monitors Detect Attacks

["Paul Ferguson" <fergdawg () netzero net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Via TERENA News.

[snip]

The LOBSTER project, which has developed a pilot European infrastructure
for accurate Internet traffic monitoring, concludes this week with its
final review on 18 September.

Within the past four months, the number of passive monitoring sensors
installed in the LOBSTER infrastructure has risen to 50, with around
200,000 new cyberattacks being detected. This is in addition to the 400,000
attacks that were captured during the previous year, and reflects the
expansion of the sensor network and improved detection methods.

Sensors are now deployed in several European countries, as well as
Singapore and the United States. They continue to monitor more than 2
million IP addresses, with the aggregate traffic capacity on the monitoring
links exceeding 75 gigabits per second. The locations of sensors in the
network can be viewed using Google Maps, where a click on each icon allows
their traffic data to be examined.

A selection of the cyberattacks captured by LOBSTER’s sensors have also
had their payload traces anonymised and have been made publicly available
for research purposes via an 'attack trace repository'.


[snip]

More:
http://www.terena.org/news/fullstory.php?news_id=2162

LOBSTER Project Page:
http://www.ist-lobster.org/

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFG8CD6q1pz9mNUZTMRAmx4AKD6mRstIy+RsYOqz+aBhDFUXrmxwACgzca0
T5quAMi5nFkVJDT/YbI2QLE=
=2fUp
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.