Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

DScope: A Cloud-Native Internet Telescope for Network Security Measurement

NANOG via YouTube

Overview

Watch a 32-minute NANOG conference talk exploring DScope, a revolutionary cloud-native Internet telescope designed to measure adversarial behavior on the Internet. Learn how this innovative system leverages cloud provider IP address pools to overcome limitations of conventional darknet telescopes, offering enhanced situational awareness of cyber threats. Discover how DScope challenges traditional assumptions about Internet measurement through its dynamic IP address footprint and interactive compute capabilities. Follow along as speaker Eric Pauley, a Ph.D. candidate at the University of Wisconsin-Madison, presents comparative findings between DScope and Merit's ORION darknet telescope, revealing previously invisible cloud-targeted traffic patterns and optimal measurement techniques. Gain insights into the system's unique approach of prioritizing quality over quantity in traffic measurement, its implementation of Linux Netfilter for transport-layer honeypot functionality, and the surprising discovery that optimal measurement requires relatively short IP address holding times on AWS. Understand the broader implications for network security, research opportunities, and potential collaborations with network operators and security practitioners.

Syllabus

Introduction
Internet Measurement
Inbound Application Layer
The Real Question
DScope
DScope Data
Coverage
Followon Scanning
Maximum Coverage
Examples
Conclusion

Taught by

NANOG

Reviews

Start your review of DScope: A Cloud-Native Internet Telescope for Network Security Measurement

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.