Statistical analysis of attacking autonomous systems

Abstract

The paper focuses to the analysis of attacks against the honeynet from various autonomous systems (AS) in the Internet. The probes are distributed across various network types - academic, commercial VPS, ISP - in Czech Rep. and Slovakia. Attacker behavior differences per AS as well as activities done in the honeynet on individual probes were analyzed. Advanced statistical methods were applied to extract a closer idea on attackers' activities.