Victim routine influences the number of DDoS attacks: Evidence from Dutch educational network

Abhishta Abhishta; Marianne Junger; Reinoud Joosten; Lambert J.M. Nieuwenhuis

doi:10.1109/SPW.2019.00052

Victim routine influences the number of DDoS attacks: Evidence from Dutch educational network

Abhishta Abhishta, Marianne Junger, Reinoud Joosten, Lambert J.M. Nieuwenhuis

Industrial Engineering & Business Information Systems

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

2 Citations (Scopus)

10 Downloads (Pure)

Abstract

We study the influence of daily routines of Dutch academic institutions on the number of DDoS attacks targeting their infrastructures. We hypothesise that the attacks are motivated and harness the postulates of Routine Activity Theory (RAT) from criminology to analyse the data. We define routine periods in order to group days with similar activities and use 2.5 years of NetFlow alerts data measured by SURFnet to compare the number of alerts generated during each of these periods. Our analysis shows clear correlation between academic schedules and attack patterns on academic institutions. This leads us to believe that most of these attacks are not random and are initiated by someone who might benefit by disrupting scheduled educational activities.

Original language	English
Title of host publication	2019 IEEE Security and Privacy Workshops, SPW 2019
Publisher	IEEE
Pages	242-247
Number of pages	6
ISBN (Electronic)	9781728135083
DOIs	https://doi.org/10.1109/SPW.2019.00052
Publication status	Published - 19 Sep 2019
Event	IEEE Security and Privacy Workshops, SPW 2019 - San Francisco, United States Duration: 23 May 2019 → 23 May 2019

Conference

Conference	IEEE Security and Privacy Workshops, SPW 2019
Abbreviated title	SPW 2019
Country/Territory	United States
City	San Francisco
Period	23/05/19 → 23/05/19

Keywords

Aims
DDoS attacks
NetFlow analysis
Routine activity theory
2023 OA procedure

Access to Document

10.1109/SPW.2019.00052

Abhishta2019victimFinal published version, 539 KBLicence: Taverne

Cite this

@inproceedings{817a635cd940428a9cf2756555eedf3c,

title = "Victim routine influences the number of DDoS attacks: Evidence from Dutch educational network",

abstract = "We study the influence of daily routines of Dutch academic institutions on the number of DDoS attacks targeting their infrastructures. We hypothesise that the attacks are motivated and harness the postulates of Routine Activity Theory (RAT) from criminology to analyse the data. We define routine periods in order to group days with similar activities and use 2.5 years of NetFlow alerts data measured by SURFnet to compare the number of alerts generated during each of these periods. Our analysis shows clear correlation between academic schedules and attack patterns on academic institutions. This leads us to believe that most of these attacks are not random and are initiated by someone who might benefit by disrupting scheduled educational activities.",

keywords = "Aims, DDoS attacks, NetFlow analysis, Routine activity theory, 2023 OA procedure",

author = "Abhishta Abhishta and Marianne Junger and Reinoud Joosten and Nieuwenhuis, {Lambert J.M.}",

year = "2019",

month = sep,

day = "19",

doi = "10.1109/SPW.2019.00052",

language = "English",

pages = "242--247",

booktitle = "2019 IEEE Security and Privacy Workshops, SPW 2019",

publisher = "IEEE",

note = "IEEE Security and Privacy Workshops, SPW 2019, SPW 2019 ; Conference date: 23-05-2019 Through 23-05-2019",

}

Abhishta, A, Junger, M, Joosten, R & Nieuwenhuis, LJM 2019, Victim routine influences the number of DDoS attacks: Evidence from Dutch educational network. in 2019 IEEE Security and Privacy Workshops, SPW 2019., 8844620, IEEE, pp. 242-247, IEEE Security and Privacy Workshops, SPW 2019, San Francisco, California, United States, 23/05/19. https://doi.org/10.1109/SPW.2019.00052

TY - GEN

T1 - Victim routine influences the number of DDoS attacks

T2 - IEEE Security and Privacy Workshops, SPW 2019

AU - Abhishta, Abhishta

AU - Junger, Marianne

AU - Joosten, Reinoud

AU - Nieuwenhuis, Lambert J.M.

PY - 2019/9/19

Y1 - 2019/9/19

N2 - We study the influence of daily routines of Dutch academic institutions on the number of DDoS attacks targeting their infrastructures. We hypothesise that the attacks are motivated and harness the postulates of Routine Activity Theory (RAT) from criminology to analyse the data. We define routine periods in order to group days with similar activities and use 2.5 years of NetFlow alerts data measured by SURFnet to compare the number of alerts generated during each of these periods. Our analysis shows clear correlation between academic schedules and attack patterns on academic institutions. This leads us to believe that most of these attacks are not random and are initiated by someone who might benefit by disrupting scheduled educational activities.

AB - We study the influence of daily routines of Dutch academic institutions on the number of DDoS attacks targeting their infrastructures. We hypothesise that the attacks are motivated and harness the postulates of Routine Activity Theory (RAT) from criminology to analyse the data. We define routine periods in order to group days with similar activities and use 2.5 years of NetFlow alerts data measured by SURFnet to compare the number of alerts generated during each of these periods. Our analysis shows clear correlation between academic schedules and attack patterns on academic institutions. This leads us to believe that most of these attacks are not random and are initiated by someone who might benefit by disrupting scheduled educational activities.

KW - Aims

KW - DDoS attacks

KW - NetFlow analysis

KW - Routine activity theory

KW - 2023 OA procedure

UR - http://www.scopus.com/inward/record.url?scp=85073143762&partnerID=8YFLogxK

U2 - 10.1109/SPW.2019.00052

DO - 10.1109/SPW.2019.00052

M3 - Conference contribution

SP - 242

EP - 247

BT - 2019 IEEE Security and Privacy Workshops, SPW 2019

PB - IEEE

Y2 - 23 May 2019 through 23 May 2019

ER -

Victim routine influences the number of DDoS attacks: Evidence from Dutch educational network

Abstract

Conference

Keywords

Access to Document

Other files and links

The Blind Man and The Elephant: Measuring Economic Impacts of DDoS Attacks

Cite this