10/27/2008

participate with d-shield and get instant blocking lists

They launched (BETA) Highly predictive blacklists that employ a link analysis algorithm similar to Google's PageRank scheme used to find the most relevant web pages given a user's query. But instead of web queries, the firewall logs of DShield contributors are cross-compared with one another in search of overlaps among the attackers they report. The attacker addresses included within a HPB are selected by favoring the inclusion of those attackers who have been encountered by other contributors who share degrees of overlap with the HPB owner

Advice somewhere in your firewall you can make rules that make it possible to monitor something without blocking it. If you want to be sure to use this list without blocking normal websites or services you should do this.

This is how you participate by giving logs just like all these other Belgians did

Tracked logs Hosts4,923
Total Reports of attacks303,871
Avg. Targets attacked25.4
Persistance of attacks1.4 days

and these are more important links to use

  • [LINK] - DShield.org HPB Web Link - DShield contributors can download and evaluate their own Highly Predictive Blacklists.
  • [PDF] Highly Predictive Blacklisting - Full SRI Technical Report - presents the HPB Algorithm and the full comparative evaluation results .
  • [LINK] - HPB Technical Summary - A Short 2-page technical summary of the HPB Algorithm.
  • [LINK] - HPB Service Announcement Page - SRI and DShield.org announce their joint release of the HPB service.
  • 11:32 | Permalink | Comments (0) | Email this | |  del.icio.us | | Digg! Digg |  Facebook

    Post a comment