Botnet Sizes: When Maths Meet Myths

Elisa Chiapponi; Marc Dacier; Massimiliano Todisco; Onur Catakoglu; Olivier Thonnard

doi:10.1007/978-3-030-76352-7_52

Botnet Sizes: When Maths Meet Myths

Elisa Chiapponi, Marc Dacier, Massimiliano Todisco, Onur Catakoglu, Olivier Thonnard

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

This paper proposes a method and empirical pieces of evidence to investigate the claim commonly made that proxy services used by web scraping bots have millions of residential IPs at their disposal. Using a real-world setup, we have had access to the logs of close to 20 heavily targeted websites and have carried out an experiment over a two months period. Based on the gathered empirical pieces of evidence, we propose mathematical models that indicate that the amount of IPs is likely 2 to 3 orders of magnitude smaller than the one claimed. This finding suggests that an IP reputation-based blocking strategy could be effective, contrary to what operators of these websites think today.

Original language	English (US)
Title of host publication	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Publisher	Springer Science and Business Media Deutschland GmbH
Pages	596-611
Number of pages	16
ISBN (Print)	9783030763510
DOIs	https://doi.org/10.1007/978-3-030-76352-7_52
State	Published - Jan 1 2021
Externally published	Yes

Bibliographical note

Generated from Scopus record by KAUST IRTS on 2022-09-12

Access to Document

10.1007/978-3-030-76352-7_52

Cite this

@inproceedings{c5df8e64d378475d95c65a686985cc82,

title = "Botnet Sizes: When Maths Meet Myths",

abstract = "This paper proposes a method and empirical pieces of evidence to investigate the claim commonly made that proxy services used by web scraping bots have millions of residential IPs at their disposal. Using a real-world setup, we have had access to the logs of close to 20 heavily targeted websites and have carried out an experiment over a two months period. Based on the gathered empirical pieces of evidence, we propose mathematical models that indicate that the amount of IPs is likely 2 to 3 orders of magnitude smaller than the one claimed. This finding suggests that an IP reputation-based blocking strategy could be effective, contrary to what operators of these websites think today.",

author = "Elisa Chiapponi and Marc Dacier and Massimiliano Todisco and Onur Catakoglu and Olivier Thonnard",

note = "Generated from Scopus record by KAUST IRTS on 2022-09-12",

year = "2021",

month = jan,

day = "1",

doi = "10.1007/978-3-030-76352-7_52",

language = "English (US)",

isbn = "9783030763510",

pages = "596--611",

booktitle = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Science and Business Media Deutschland GmbH",

address = "Germany",

}

Botnet Sizes: When Maths Meet Myths. / Chiapponi, Elisa; Dacier, Marc; Todisco, Massimiliano et al.
Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). Springer Science and Business Media Deutschland GmbH, 2021. p. 596-611.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Botnet Sizes: When Maths Meet Myths

AU - Chiapponi, Elisa

AU - Dacier, Marc

AU - Todisco, Massimiliano

AU - Catakoglu, Onur

AU - Thonnard, Olivier

N1 - Generated from Scopus record by KAUST IRTS on 2022-09-12

PY - 2021/1/1

Y1 - 2021/1/1

N2 - This paper proposes a method and empirical pieces of evidence to investigate the claim commonly made that proxy services used by web scraping bots have millions of residential IPs at their disposal. Using a real-world setup, we have had access to the logs of close to 20 heavily targeted websites and have carried out an experiment over a two months period. Based on the gathered empirical pieces of evidence, we propose mathematical models that indicate that the amount of IPs is likely 2 to 3 orders of magnitude smaller than the one claimed. This finding suggests that an IP reputation-based blocking strategy could be effective, contrary to what operators of these websites think today.

AB - This paper proposes a method and empirical pieces of evidence to investigate the claim commonly made that proxy services used by web scraping bots have millions of residential IPs at their disposal. Using a real-world setup, we have had access to the logs of close to 20 heavily targeted websites and have carried out an experiment over a two months period. Based on the gathered empirical pieces of evidence, we propose mathematical models that indicate that the amount of IPs is likely 2 to 3 orders of magnitude smaller than the one claimed. This finding suggests that an IP reputation-based blocking strategy could be effective, contrary to what operators of these websites think today.

UR - https://link.springer.com/10.1007/978-3-030-76352-7_52

UR - http://www.scopus.com/inward/record.url?scp=85111379329&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-76352-7_52

DO - 10.1007/978-3-030-76352-7_52

M3 - Conference contribution

SN - 9783030763510

SP - 596

EP - 611

BT - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

PB - Springer Science and Business Media Deutschland GmbH

ER -

Botnet Sizes: When Maths Meet Myths

Abstract

Bibliographical note

Access to Document

Other files and links

Fingerprint

Cite this