Evaluating the Impact of AbuseHUB on Botnet Mitigation

Evaluating the Impact of AbuseHUB on Botnet Mitigation

van Eeten, M.J.G. (TU Delft Organisation & Governance)
Lone, Q.B. (TU Delft Organisation & Governance)
Moura, Giovane C. M. (TU Delft Organisation & Governance)
Asghari, H. (TU Delft Organisation & Governance)
Korczynski, M.T. (TU Delft Organisation & Governance)

2016

This documents presents the final report of a two-year project to evaluate the impact of AbuseHUB, a Dutch clearinghouse for acquiring and processing abuse data on infected machines. The report was commissioned by the Netherlands Ministry of Economic Affairs, a co-funder of the development of AbuseHUB. AbuseHUB is the initiative of 9 Internet Service Providers, SIDN (the registry for the .nl top-level domain) and Surfnet (the national research and education network operator). The key objective of AbuseHUB is to improve the mitigation of botnets by its members.
We set out to assess whether this objective is being reached by analyzing malware infection levels in the networks of AbuseHUB members and comparing them to those of other Internet Service Providers (ISPs). Since AbuseHUB members together comprise over 90 percent of the broadband market in the Netherlands, it also makes sense to compare how the country as a whole has performed compared to other countries. This report complements the baseline measurement report produced in December 2013 and the interim report from March 2015. We are using the same data sources as in the interim report, which is an expanded set compared to the earlier baseline report and to our 2011 study into botnet mitigation in the Netherlands.

http://resolver.tudelft.nl/uuid:c5a4612d-092a-491e-a733-2893e67ce04e

Cornell University Press

Institutional Repository

report

© 2016 M.J.G. van Eeten, Q.B. Lone, Giovane C. M. Moura, H. Asghari, M.T. Korczynski