Country Governance and IP Reputation Bradley Hu ff aker Topology - - PowerPoint PPT Presentation

▶
country governance and ip reputation
SMART_READER_LITE
LIVE PREVIEW

Country Governance and IP Reputation Bradley Hu ff aker Topology - - PowerPoint PPT Presentation

Sep 08, 2022 449 likes •597 views

Country Governance and IP Reputation Bradley Hu ff aker Topology Meeting Naval Postgraduate School, June 2013 Tuesday, June 18, 13 Outline Hypothesis Data Analysis Future Work URLs Tuesday, June 18, 13 Outline

slide-1
SLIDE 1

Country Governance and IP Reputation

Bradley Huffaker

Topology Meeting Naval Postgraduate School, June 2013

Tuesday, June 18, 13

slide-2
SLIDE 2

Outline

  • Hypothesis
  • Data
  • Analysis
  • Future Work
  • URLs

Tuesday, June 18, 13

slide-3
SLIDE 3

Outline

  • Hypothesis
  • Data
  • Analysis
  • Future Work
  • URLs

Tuesday, June 18, 13

slide-4
SLIDE 4

Hypothesis

4

Countries with more transparent, democratic governmental institutions should harbor a smaller fraction of misbehaving (blacklisted) hosts.

Tuesday, June 18, 13

slide-5
SLIDE 5

Outline

  • Introduction
  • Data
  • Analysis
  • Future Work
  • URLs

Tuesday, June 18, 13

slide-6
SLIDE 6

Data IP reputation

  • Composite Blocking List

Spamhaus Project

  • IP address list of suspected spam or botnet activity
  • country IPv4 allocated

Regional Internet Registries (RIR)

  • delegation files list which addresses are allocate per country
  • country IPv4 users

CIA Factbook

  • number of Internet user per country

6

IPop %* = country breakdown (CBL) country IPv4 allocated Infection %* = country breakdown (CBL) country IPv4 users *provided by Spamhaus

Tuesday, June 18, 13

slide-7
SLIDE 7

Data Country Reputation

  • Corruption Perceptions Index (CPI)

Transparency International

  • combines 13 different surveys and assessments
  • corruption: misuse of public power for private benefit
  • ranges from 0 (highly corrupt) to 100 (very clean)
  • Democracy Index (DI)

Economist Intelligence Unit

  • based on 60 indicators:
  • electoral process, civil liberties, function government, political participation, and political

culture

  • Score
  • 0-4 Authoritarian Regimes
  • 4-6 Hybrid Regimes
  • 6-8 Flawed Democracies
  • 8-10 Full Democracies

7

Tuesday, June 18, 13

slide-8
SLIDE 8

Outline

  • Introduction
  • Data
  • Analysis
  • Future Work
  • URLs

Tuesday, June 18, 13

slide-9
SLIDE 9

Country level IP Reputation

http://www.caida.org/research/policy/country-level-ip-reputation/

9

GDP

$15T $7T $2B

continent

Asia Africa Europe NorthAmerica Oceania South America

US CN IN JP DE RU BR UK FR IT MX KR CA ES ID TR IR AU TW PL AR SA NL TH ZA EG PK CO MY NG BE PH VE SE HK CH AT UA PE VN CL BD CZ GR NO DZ RO AE IL PT KZ DK FI HU IE QA MA KW IQ BY EC SK NZ AO LK CU SY TN UZ BG ET DO AZ OM LY GH SD HR RS GT KE TZ LT LB CR SI YE PA BO UY UG CM TM SV LU PY NP CI JO HN LV KH AF BH BA BW EE TT GA SN GE MZ AL JM BF ZM CY MK MU NI LA AM PG TJ ML MN RW KG HT IS MD MT TL MR ME ZW SR SZ BT LS GM DJ

highly corrupt very clean full democracies authoritarian regimes flawed democracies hybrid regimes

20 40 60 80

Corruption Perception Index

1e-2 1e-1 1e+0

Spamming Hosts / Number of Internet Users

y = e^(-0.054675*x + 1.0164) y = e^(-0.020707*x + -0.77898) y = e^(-1.1437*x + 6.5177) y = e^(-0.17618*x + -0.037123) y = e^(0.077991*x + -1.17857) y = e^(-0.52325*x +2.0788)

Tuesday, June 18, 13

slide-10
SLIDE 10

Country level IP Reputation

10

Mixed ReputationZone High ReputationZone

2 4 6 8

Democracy Index

full democracies hybrid regimes authoritarian regimes flawed democracies

20 40 60 80

Corruption Perception Index

corrupt clean

Infect %

0.005 - 0.358 (60%) 0.363 - 0.885 (17%) 0.890 - 2.055 (18%) 2.135 - 8.360 (5%)

Tuesday, June 18, 13

slide-11
SLIDE 11

Outline

  • Introduction
  • Data
  • Analysis
  • Future Work
  • URLs

Tuesday, June 18, 13

slide-12
SLIDE 12

Future Work

  • Reproduce the IPoP % and Infected %

It would be good to reproduce these numbers with our own geolcation and allocation numbers

  • Compare it against other Blacklist sources/types

Darknets, dnswl.org

  • Use other country level metrics

CGI, population, etc

  • Compare DI or CPI? with other metrics

Are there other Internet metrics (Number AS / GDP) that are related to DI or CPI?

12

Tuesday, June 18, 13

slide-13
SLIDE 13

URLs

  • Composit Blocking List (country breakdown)

http://cbl.abuseat.org/country.html

  • Corruption Perceptions Index

http://www.transparency.org/research/cpi/overview

  • Democracy Index

http://www.eiu.com/public/thankyou_download.aspx? activity=download&campaignid=DemocracyIndex2011

Bradley Huffaker CAIDA, UC San Diego bradley@caida.org

13

http://www.caida.org/research/policy/country-level-ip-reputation/

Tuesday, June 18, 13