Researchers borrow from Google PageRank for network defense service

Posted by Ryan Naraine @ 11:21 am Using a link analysis algorithm similar to Google PageRank, researchers at the SANS Institute and SRI International have created a new Internet network defense service that completely revamps the way network blacklists are formulated and distributed. The service, called Highly Predictive Blacklisting (.pdf), will be unveiled next week at the Usenix 17th Usenix Security Symposium. An experimental version is currently available for free to all DShield contributors. The skinny: Highly Predictive Blacklists (HPBs) represent a radically different approach to blacklist formulation. HPBs are derived uniquely per DShield contributor, and rank each attacker in the blacklist based on an estimation of the probability that the attacker will visit the contributor’s network in the future. The HPB algorithm... [read full story]