Victim routine influences the number of DDoS attacks: Evidence from Dutch educational network

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

4 Downloads (Pure)

Abstract

We study the influence of daily routines of Dutch academic institutions on the number of DDoS attacks targeting their infrastructures. We hypothesise that the attacks are motivated and harness the postulates of Routine Activity Theory (RAT) from criminology to analyse the data. We define routine periods in order to group days with similar activities and use 2.5 years of NetFlow alerts data measured by SURFnet to compare the number of alerts generated during each of these periods. Our analysis shows clear correlation between academic schedules and attack patterns on academic institutions. This leads us to believe that most of these attacks are not random and are initiated by someone who might benefit by disrupting scheduled educational activities.

Original languageEnglish
Title of host publication2019 IEEE Security and Privacy Workshops, SPW 2019
PublisherIEEE
Pages242-247
Number of pages6
ISBN (Electronic)9781728135083
DOIs
Publication statusPublished - 19 Sep 2019
EventIEEE Security and Privacy Workshops, SPW 2019 - San Francisco, United States
Duration: 23 May 201923 May 2019

Conference

ConferenceIEEE Security and Privacy Workshops, SPW 2019
Abbreviated titleSPW 2019
CountryUnited States
CitySan Francisco
Period23/05/1923/05/19

Keywords

  • Aims
  • DDoS Attacks
  • NetFlow Analysis
  • Routine Activity Theory

Cite this

@inproceedings{817a635cd940428a9cf2756555eedf3c,
title = "Victim routine influences the number of DDoS attacks: Evidence from Dutch educational network",
abstract = "We study the influence of daily routines of Dutch academic institutions on the number of DDoS attacks targeting their infrastructures. We hypothesise that the attacks are motivated and harness the postulates of Routine Activity Theory (RAT) from criminology to analyse the data. We define routine periods in order to group days with similar activities and use 2.5 years of NetFlow alerts data measured by SURFnet to compare the number of alerts generated during each of these periods. Our analysis shows clear correlation between academic schedules and attack patterns on academic institutions. This leads us to believe that most of these attacks are not random and are initiated by someone who might benefit by disrupting scheduled educational activities.",
keywords = "Aims, DDoS Attacks, NetFlow Analysis, Routine Activity Theory",
author = "Abhishta Abhishta and Marianne Junger and Reinoud Joosten and Nieuwenhuis, {Lambert J.M.}",
year = "2019",
month = "9",
day = "19",
doi = "10.1109/SPW.2019.00052",
language = "English",
pages = "242--247",
booktitle = "2019 IEEE Security and Privacy Workshops, SPW 2019",
publisher = "IEEE",
address = "United States",

}

Abhishta, A, Junger, M, Joosten, R & Nieuwenhuis, LJM 2019, Victim routine influences the number of DDoS attacks: Evidence from Dutch educational network. in 2019 IEEE Security and Privacy Workshops, SPW 2019., 8844620, IEEE, pp. 242-247, IEEE Security and Privacy Workshops, SPW 2019, San Francisco, United States, 23/05/19. https://doi.org/10.1109/SPW.2019.00052

Victim routine influences the number of DDoS attacks : Evidence from Dutch educational network. / Abhishta, Abhishta; Junger, Marianne; Joosten, Reinoud; Nieuwenhuis, Lambert J.M.

2019 IEEE Security and Privacy Workshops, SPW 2019. IEEE, 2019. p. 242-247 8844620.

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

TY - GEN

T1 - Victim routine influences the number of DDoS attacks

T2 - Evidence from Dutch educational network

AU - Abhishta, Abhishta

AU - Junger, Marianne

AU - Joosten, Reinoud

AU - Nieuwenhuis, Lambert J.M.

PY - 2019/9/19

Y1 - 2019/9/19

N2 - We study the influence of daily routines of Dutch academic institutions on the number of DDoS attacks targeting their infrastructures. We hypothesise that the attacks are motivated and harness the postulates of Routine Activity Theory (RAT) from criminology to analyse the data. We define routine periods in order to group days with similar activities and use 2.5 years of NetFlow alerts data measured by SURFnet to compare the number of alerts generated during each of these periods. Our analysis shows clear correlation between academic schedules and attack patterns on academic institutions. This leads us to believe that most of these attacks are not random and are initiated by someone who might benefit by disrupting scheduled educational activities.

AB - We study the influence of daily routines of Dutch academic institutions on the number of DDoS attacks targeting their infrastructures. We hypothesise that the attacks are motivated and harness the postulates of Routine Activity Theory (RAT) from criminology to analyse the data. We define routine periods in order to group days with similar activities and use 2.5 years of NetFlow alerts data measured by SURFnet to compare the number of alerts generated during each of these periods. Our analysis shows clear correlation between academic schedules and attack patterns on academic institutions. This leads us to believe that most of these attacks are not random and are initiated by someone who might benefit by disrupting scheduled educational activities.

KW - Aims

KW - DDoS Attacks

KW - NetFlow Analysis

KW - Routine Activity Theory

UR - http://www.scopus.com/inward/record.url?scp=85073143762&partnerID=8YFLogxK

U2 - 10.1109/SPW.2019.00052

DO - 10.1109/SPW.2019.00052

M3 - Conference contribution

AN - SCOPUS:85073143762

SP - 242

EP - 247

BT - 2019 IEEE Security and Privacy Workshops, SPW 2019

PB - IEEE

ER -