0
Rapid and Massive monitoring ofDHT: crawling 10 millions of nodes in             24 hours                   PacSec Tokyo N...
Overview:      detecting illegal adoption in huge network•   BitTorrent becomes irreplaceable network application for    d...
Demo: observed nodes    10 millions of nodes    in 24 hours !                                 3                           ...
BT: The largest file sharing network in the world.It is estimated that BitTorrent has 70 million activeusers and 100 milli...
BitTorrent is now expanding and everywhere !●BitTorrent in portable USB storage deviceshttp://www.iodata.com/●Android: Bit...
The old new problem: illegal contents downloadsBitTorrent is the one of the most efficient way toshare large files such as...
The case of Limewire 2010 Oct●In 2010 Oct, A New York judge ordered LimeWire to shutdown its file-sharing software.US fede...
Right to be deleted or forgotten?2010 Nov: EC announced the plan for settingout strategy to strengthen EU data protectionr...
Dot-P2P             Domain seizures and BT based DNS●2010 June: WikiLeaks leverages torrent and magnet links for distribut...
BitTorrent HistoryThe implementation of BitTorrent has beenstarted by Bram Cohen in 2001.He has released client software i...
BitTorrent Traffic estimations① “55%” - CableLabsAbout an half of upstream traffic of CATV.② “35%” - CacheLogic“LIVEWIRE -...
Basic architecture of tracker network                               ① Ask                               Node A (newcomer) ...
BitTorrent Network            tracker or DHT (trackerless)Tracker – a dedicated machine which stores torrent files,tracks ...
DHT Protocol●DHT is not new specIntroduced to Azureus (2005) and BitCommet (2005).●Based On Kademlia, XOR based DHTPetar M...
DHT Protocol●Magnet links are URLs which enables each node download and/or distribute contents without querying tracker si...
DHT ProtocolDHT network is scalable architecture for file sharing system.  Pure P2P: hundreds of thousands of nodes  DHT: ...
DHT ProtocolThere are four kinds of messages of BitTorrent DHTNetwork: PING, STORE, FIND_NODE and FIND VALUE.• PING : the ...
DHT ProtocolThere are four kinds of messages of BitTorrent DHTNetwork: PING, STORE, FIND_NODE and FIND VALUE.•   GET_PEERS...
Monitoring system architecture              DHT network                                                            ReduceD...
Scaling out crawlers !                                           The response should be a key nodes of                    ...
Hadoop & MapReduce                                      Retrieval                                       geoLocation       ...
Rapid crawling: 24 hours to reach 10000000                                 nodes !                                        ...
Visualization & ranking *.*.39.201,6881,2011/9/25 23:57:43,1 *.*.210.128,62845,2011/9/25 23:56:32,1 *.*.33.212,6881,2011/9...
Map Reduce                  Map             ReduceInput             Map             Reduce         Output                 ...
Map  *.*.194.107,h116-0-194-107.catv02.itscom.jp  *.*.27.107,c-76-28-27-107.hsd1.ct.comcast.net  *.*.239.181,c-68-40-239-1...
Reduce*.0.194.107      hdsl1    comcast      hdsl1     comcast      verizon         virginmedia     1             1       ...
Sorting and ranking*.0.194.107      hdsl1      comcast       hdsl1      comcast       verizon      hdsl1     1            ...
# of nodes Ranking in one dayRANK                        Country   # of nodes                 Region        Domain       1...
visualization      KML (Keyhole Markup Language)■ KML is a XML-like file format for for displaying geographic data on Goog...
EU: 4           UK              414,282 West Europe    GB                                                                 ...
Rank 1 Russia 1,488,056                                                              Moscow 284959 (13670000: 2%)         ...
Rank 1 Russia 1,488,056                                   ru    869194                                   pppoe 157254     ...
Demo: observed nodes in Moscow         10 millions of nodes         in 24 hours !                                      33 ...
Island in the stream: Male           [root@localhost ranking]# geoiplookup -f           MV, 40, Male, N/A, 4.166700, 73.50...
Island in the stream: Arue            [root@localhost ~]# nslookup *.*.*.*            Non-authoritative answer:           ...
Rank 2 United states 1,177,76                                                              N/A 207179                     ...
Rank 2 United states 1,177,766                                            user 78494                                      ...
Rank 11 Japan 262,678                                                              N/A 69648                              ...
Rank 11 Japan 262,678                                 jp   226354                                 ne    173513            ...
rank 3 China                  815,934 East Asia CN                                                                Beijing ...
rank 3 China   815,934 East Asia CN                                        cn      90196                                  ...
ALL cities                       N/A 978457                       Moscow 285097 (RU:1)                       Beijing 24041...
All the world                                     net 2676477        co    171029                                     com ...
Demo: flying over Eurasia      10 millions of nodes      in 24 hours !                                  44                ...
conclusionIn this presentation, we have shown the possibility of obtaining information of10,000,000 nodes in 24 hours.In c...
Thank you for listening !                            46
Upcoming SlideShare
Loading in...5
×

Pac sec2011 ruoando-nict-2011-11-09-01-eng

447

Published on

Published in: Technology
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
447
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
1
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Transcript of "Pac sec2011 ruoando-nict-2011-11-09-01-eng"

  1. 1. Rapid and Massive monitoring ofDHT: crawling 10 millions of nodes in 24 hours PacSec Tokyo November 2011 In this presentation, we present our high-speed DHT Crawler to monitor 10 millions of nodes in 24 hours ! Ruo AndoNICT National Institute of Information and Communications Technology Takayuki Sugiura NetAgent Co. Ltd. 1
  2. 2. Overview: detecting illegal adoption in huge network• BitTorrent becomes irreplaceable network application for distributing software and contents. But ..• No one can know its exact scale and dynamics ! How many nodes join and disappear in BitTorrent network in 24 hours ?• BitTorrent network is huge and no one can know about where (potential) security incidents and illegal adoption has been occurred !• We have tackled this challenge of monitoring the largest scale network using our rapid and massive DHT crawler.• We have succeeded to obtain 10,000,000 nodes in 24 hours !• Also, visualizing the dynamics of BitTorrent Network is presented ! 2 PacSec 2011
  3. 3. Demo: observed nodes 10 millions of nodes in 24 hours ! 3 PacSec 2011
  4. 4. BT: The largest file sharing network in the world.It is estimated that BitTorrent has 70 million activeusers and 100 million total users and it is stillincreasing ! 4 PacSec 2011
  5. 5. BitTorrent is now expanding and everywhere !●BitTorrent in portable USB storage deviceshttp://www.iodata.com/●Android: BitTorrent Client | aBTCAvailable in about $5 !https://market.android.com/ 5 PacSec 2011
  6. 6. The old new problem: illegal contents downloadsBitTorrent is the one of the most efficient way toshare large files such as Operating system IOS.Unfortunately, BT is at the same time a very efficient way todownload protected (copyright) content sush as movies andmusic in illegal manner.The biggest case of BitTorrent:In 2010, United States Copyrights Group(USCG) said that23,322 IP addresses have allegedly infringed the movieof Expendables. The settlements is around $3,000 perinfringement. 6 PacSec 2011
  7. 7. The case of Limewire 2010 Oct●In 2010 Oct, A New York judge ordered LimeWire to shutdown its file-sharing software.US federal court judge issued that Limewire’sservice is used as one of the software forinfringement of copyright contents.●Later soon, the new version of Limewire calledLPE (Limewire Pirate Edition) has been releasedas resurrection by anonymous creators. 7 PacSec 2011
  8. 8. Right to be deleted or forgotten?2010 Nov: EC announced the plan for settingout strategy to strengthen EU data protectionrules.EU people basically recognize the currentPervasive use of BitTorrent and its potentialas promising. Also, EU people would likeBitTorrent to be adopted in legal manner. 8 PacSec 2011
  9. 9. Dot-P2P Domain seizures and BT based DNS●2010 June: WikiLeaks leverages torrent and magnet links for distributing files.●U.S. Immigration and Customs Enforcement (ICE) seizures the site domain of BT meta search engine.●U.S proposed Combating Online Infringement and Counterfeits Act’ (COICA) which would allow the Department of Justice to order the domain register to take the domain offline. COICA will be aimed to increase the government’s censorship powers.●In a direct response to the domain seizures by US authorities, Dot- P2P project proposes ICANN or IPS independent DNS service.●In Dot-P2P system, a request for .p2p TLD is redirected to a locally hosted DNS database. The traffic is encrypted and sent according to the BitTorrent protocol which result in that .p2p TLD is decentralized and independent of ICANN or any IPS’s DNS service. 9 PacSec 2011
  10. 10. BitTorrent HistoryThe implementation of BitTorrent has beenstarted by Bram Cohen in 2001.He has released client software in 2003.In 2003, a user in EU has released ISO image ofRed Hat and the 30,000 image has been downloaded in 3days.In 2004, he had formed BitTorrent Inc and by mid2005, BitTorrent Inc was funded by VC. 10 PacSec 2011
  11. 11. BitTorrent Traffic estimations① “55%” - CableLabsAbout an half of upstream traffic of CATV.② “35%” - CacheLogic“LIVEWIRE - File-sharing network thrives beneaththe Radar”③ “60%” - documents in www.sans.edu“It is estimated that more than 60% of the traffic onthe internet is peer-to-peer.” 11 PacSec 2011
  12. 12. Basic architecture of tracker network ① Ask Node A (newcomer) ask the tracker for searching the file. ② torrent download Tracker provides torrent file. ③ join Node A queries node B. ④ download Node A can downloads pieces of file on swarm network Seeder has a complete file. Leecher has pieces of file. 12 PacSec 2011
  13. 13. BitTorrent Network tracker or DHT (trackerless)Tracker – a dedicated machine which stores torrent files,tracks of which nodes are downloading and uploading.DHT – decentralized network architecture to share thefunctionality of the tracker. DHT is decentralized, but ismore scalable than pure-P2P.DHT (Distributed Hash Table) is method using <key,value>pairs. DHT lookup method enables us to discover thelocation of the node who shares the responsibility of trackerof a file share.Recently DHT network has been paid much attention due to Dot-P2Pproject and Pirates Bay’s confirmation of stopping tracker. 13 PacSec 2011
  14. 14. DHT Protocol●DHT is not new specIntroduced to Azureus (2005) and BitCommet (2005).●Based On Kademlia, XOR based DHTPetar Maymounkov and David Mazières. Kademlia: A peer-to-peer information system based on the XOR metric. InProceedings of the 1st International Workshop on Peer-toPeer Systems (IPTPS 02)●Supported by many clients apps.uTorent 1.8.5、Vuze 4.3.0.2、BitTorrent 6.3、BitComet 1.16、Transmission 1.76 14 PacSec 2011
  15. 15. DHT Protocol●Magnet links are URLs which enables each node download and/or distribute contents without querying tracker site.●Magnet link is provided by Pirates Bay and Mininova to fasten the download (base32 encoded and hex encoding).●2010 Pirate Bay moves to magnet-link oriented DHT, shutting down their server.●Magnet link enables BitTorent network tracker- less ? 15 PacSec 2011
  16. 16. DHT ProtocolDHT network is scalable architecture for file sharing system. Pure P2P: hundreds of thousands of nodes DHT: millions of nodesBitTorrent DHT network is implemented over KRPC. KRPCprotocol is a RPC over UDP.DHT Queries has four kinds of message: ping, find_node,get_peers and announce_peer. Each is implementedaccording to B-Encode. 16 PacSec 2011
  17. 17. DHT ProtocolThere are four kinds of messages of BitTorrent DHTNetwork: PING, STORE, FIND_NODE and FIND VALUE.• PING : the basic query for checking the queried node is alive. 20-byte string. Network byte order.• FIND_NODE : used to obtain the contact information of ID. Response should be a key “nodes” or the compact node info for the target node or the K (8) in its routing table. arguments: {"id" : "<querying nodes id>", "target" : "<id of target node>"} response: {"id" : "<queried nodes id>", "nodes" : "<compact node info>"} 17 PacSec 2011
  18. 18. DHT ProtocolThere are four kinds of messages of BitTorrent DHTNetwork: PING, STORE, FIND_NODE and FIND VALUE.• GET_PEERS : used to cope with a torrent infohash. if the queried node has peers for the infohash, response is a key values as a list of strings. if not, K nodes in the queried nodes routing table closest to the infohash• ANNOUNCE_PEER : used to announce the peer which has the querying node is downloading a torrent on a port. arguments: {"id" : "<querying nodes id>", "info_hash" : "<20-byte infohash of target torrent>", "port" : <port number>, "token" : "<opaque token>"} 18 PacSec 2011
  19. 19. Monitoring system architecture DHT network ReduceDHT Crawler DHT Crawler DHT Crawler Shuffle Scale out ! Map Map Map Key value store <key>=node ID <value>=data (address, port, etc) Dump Data 19 PacSec 2011
  20. 20. Scaling out crawlers ! The response should be a key nodes of or the compact node info for the target node or the K (8) in its routing table. Info of key nodes and K(8) should be randomly distributed. DHT network So scaling out crawlers is effective way to expand monitoring range ! DHT crawlers is running on virtualizedDHT Crawler DHT Crawler DHT Crawler Linux image. Hypervisor is VMWare ESX which provides Hypervisor rich interface to manage crawlers. 20 PacSec 2011
  21. 21. Hadoop & MapReduce Retrieval geoLocation domain name Reduce Translation KML (XML) Shuffle RankingScale out ! wordcount sorting Map Map Map Hadoop & MapReduce running on Linux RH Dump Data 21 PacSec 2011
  22. 22. Rapid crawling: 24 hours to reach 10000000 nodes ! node1200000010000000 8000000 6000000 4000000 2000000 0 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 diff hour1000000 100000 10000 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 22 PacSec 2011
  23. 23. Visualization & ranking *.*.39.201,6881,2011/9/25 23:57:43,1 *.*.210.128,62845,2011/9/25 23:56:32,1 *.*.33.212,6881,2011/9/25 23:33:58,1 *.*.9.21,49924,2011/9/25 23:37:02,1 IP address Time Location InfoDomain name (country, city, latlng) KML movie 250 200 Figure 150 100 23 50 ranking 0 1 2 3 4 5 6 7 8 9 10 11 12 GB RU JP CN US PacSec 2011
  24. 24. Map Reduce Map ReduceInput Map Reduce Output Map ReduceMapReduce is the algorithm for coping with Big data.map(key1,value) -> list<key2,value2>reduce(key2, list<value2>) -> list<value3>MapReduce: Simplified Data Processing on Large ClustersJeffrey Dean and Sanjay GhemawatOSDI04: Sixth Symposium on Operating System Design and Implementation,San Francisco, CA, December, 2004. 24 PacSec 2011
  25. 25. Map *.*.194.107,h116-0-194-107.catv02.itscom.jp *.*.27.107,c-76-28-27-107.hsd1.ct.comcast.net *.*.239.181,c-68-40-239-181.hsd1.mi.comcast.net *.*.44.184,pool-96-253-44-184.prvdri.fios.verizon.net *.*.170.168,cpc11-stok15-2-0-cust167.1-4.cable.virginmedia.com *.*.23.81,cpc2-stkn10-0-0-cust848.11-2.cable.virginmedia.com*.0.194.107 hdsl1 comcast hdsl1 comcast verizon virginmedia 1 1 1 1 1 1 1 Log string is divided into words and assigned “1”. key-value – {word, 1} 25 PacSec 2011
  26. 26. Reduce*.0.194.107 hdsl1 comcast hdsl1 comcast verizon virginmedia 1 1 1 1 1 1 1 hdsl1 comcast verizon 1 1 1 1 1Reduce: count up 1 for each word.Key-value – {hdsl, 2} / Key-value – {comcast, 2} / Key-value – {verizon, 1} 26 PacSec 2011
  27. 27. Sorting and ranking*.0.194.107 hdsl1 comcast hdsl1 comcast verizon hdsl1 1 1 1 1 1 1 1 hdsl1 comcast verizon 1 1 1 1 1 ③ ② 1 ① 27@list1 = reverse sort { (split(/¥s/,$a))[1] <=> (split(/¥s/,$b))[1] } @list1; PacSec 2011
  28. 28. # of nodes Ranking in one dayRANK Country # of nodes Region Domain 1 Russia 1,488,056 Russia RU 2 United states 1,177,766 North America US 3 China 815,934 East Asia CN 4 UK 414,282 West Europe GB 5 Canada 408,592 North America CA 6 Ukraine 399,054 East Europe UA 7 France 394,005 West Europe FR 8 India 309,008 South Asia IN 9 Taiwan 296,856 East Asia TW 10 Brazil 271,417 South America BR 11 Japan 262,678 East Asia JP 12 Romania 233,536 East Europe RO 13 Bulgaria 226,885 East Europe BG 14 South Korea 217,409 East Asia KR 15 Australia 216,250 Oceania AU 16 Poland 184,087 East Europe PL 17 Sweden 183,465 North Europe SE 18 Thailand 183,008 South East Asia TH 19 Italy 177,932 West Europe IT 20 Spain 172,969 West Europe ES 28 PacSec 2011
  29. 29. visualization KML (Keyhole Markup Language)■ KML is a XML-like file format for for displaying geographic data on Google Earth.■ Timespan tag makes it possible to make our crawling log smoothly animated on Google Earth. 29 PacSec 2011
  30. 30. EU: 4 UK 414,282 West Europe GB UK (code: GB) N/A 77490 London 47559 (7550000: 0.6%) Manchester 9808 (441000: 2%) Birmingham 6617 Leeds 5111 Glasgow 4841 Brighton 4788 Liverpool 4445 Bristol 3814 Sheffield 3536 Upon 3363250 Edinburgh 3140200 Nottingham 2412150 Newcastle 2297 Bradford 2093100 Tyne 209150 Stoke-on-trent 2021 0 Coventry 1965 1 2 3 4 5 6 7 8 9 10 11 12 Preston 1902 GB RU JP CN US 30 Reading 1814 PacSec 2011
  31. 31. Rank 1 Russia 1,488,056 Moscow 284959 (13670000: 2%) Saint 69220 Petersburg 69220 (4580000 : 1.5 %) N/A 51734 Novgorod 35505 (1330000 : 2.6 %) Yekaterinburg 31117 Velikiy 29706 Perm 28858 Tomsk 19083 Novosibirsk 18379 Voronezh 15121 Irkutsk 14943250 Krasnoyarsk 14489200 Ufa 11823150 Lenin 11640 Tyumen 11615100 Penza 1066550 Izhevsk 10259 0 Volgograd 10126 (1000000) 1 2 3 4 5 6 7 8 9 10 11 12 Saratov 9686 31 GB RU JP CN US PacSec 2011
  32. 32. Rank 1 Russia 1,488,056 ru 869194 pppoe 157254 broadband 120719 corbina 114501 ertelecom 103364 dynamic 78683 nationalcablenetworks 34208 netbynet 28339 bb 28260 ufanet 26827 avangarddsl 26225 dyn 22174Corbina Telecom/Корбина Телеком mts-nn 21939corbina.ru/ mtu-net 19994 95 19274Главная | bashtel 18588ЭР-Телеком 94 17260www.ertelecom.ru/ nn 15149 dsl 14746UfaNet.ru 178 14292 32www.ufanet.ru/ PacSec 2011
  33. 33. Demo: observed nodes in Moscow 10 millions of nodes in 24 hours ! 33 PacSec 2011
  34. 34. Island in the stream: Male [root@localhost ranking]# geoiplookup -f MV, 40, Male, N/A, 4.166700, 73.500000, 0, 0 34 PacSec 2011
  35. 35. Island in the stream: Arue [root@localhost ~]# nslookup *.*.*.* Non-authoritative answer: .in-addr.arpa name = *.*.*.* dsl.dyn.mana.pf. Authoritative answers can be found from PF, 00, Arue, N/A, -17.516800, - 149.500000, 0, 0 35 PacSec 2011
  36. 36. Rank 2 United states 1,177,76 N/A 207179 San 29263 ?? Dallas 18899 New 16213 Saint 11933 Houston 11401 Los 10931 Chicago 10876 25675 Fort 10845 Park 10465 Angeles 10400250 Brooklyn 9769 York 9462200 Lake 8885150 Miami 7575100 Diego 7161 Francisco 6743 50 Portland 6553 0 1 2 3 4 5 6 7 8 9 10 11 12 Washington 6266 GB RU JP CN US Las 6205 36 Vegas 5956 PacSec 2011
  37. 37. Rank 2 United states 1,177,766 user 78494 com 76803 br 45945 veloxzone 42333 ono 27937 dyn 26909 84 8460 users 4754 81 4336 ru 4266 62 4189Veloxzone net 3725veloxzone.com.br – Robtex 85 3134?? mns 2681 82 2454 79 2152Operadora de telefonia 212 2122celular brasileira pertencente aos grupos vivozap 1952Portugal Telecom e Telefonica. 213 1889?? 37 217 1868 PacSec 2011
  38. 38. Rank 11 Japan 262,678 N/A 69648 Tokyo 54531 (13100000: 0.045) Osaka 7430 (8860000: ??) Yokohama 6983 Nagoya 4114 Kawasaki 3503 Fukuoka 2989 Kyoto 2875 Chiba 2443 Kobe 2409 Sapporo 2015 Shizuoka 1667 Hamamatsu 1396250 Hiroshima 1356200 Setagaya 1339150 Nara 1239100 Sagamihara 115150 Toyonaka 1089 0 Kawaguchi 1077 1 2 3 4 5 6 7 8 9 10 11 12 GB RU JP CN US Tokorozawa 980 38 PacSec 2011
  39. 39. Rank 11 Japan 262,678 jp 226354 ne 173513 ocn 52352 (8000000:0.6%) ap 38034 or 22745 dion 20057 ppp 19918 ppp-bb 17674 plala 17520 ad 14851 mesh 11932 so-net 11482 eonet 11184 infoweb 10615OCN公式サイトへようこそ nt 9431ocn.ne.jp rev 9181 home 9116auone-net高速モバイル,光 yournet 8507インターネットサービスプロバイダ tokyo 7926www.auone-net.jp ftth 7814 39 PacSec 2011
  40. 40. rank 3 China 815,934 East Asia CN Beijing 240419 (17500000: 1%) Guangzhou 52981 (10330000 : 0.5 %?) Shanghai 27399 (18580000 : 0.1%?) Jinan 26281 N/A 24695 Chengdu 18835 Shenyang 18566 Tianjin 18460 Hebei 17414 Wuhan 15239 Hangzhou 12997 Harbin 10848 Changchun 10411250 Nanning 10318200 Qingdao 10257150 Taiy・ 9573100 Hefei 9455 50 Changsha 6988 0 1 2 3 4 5 6 7 8 9 10 11 12 Chongqing 5641 GB RU JP CN US Shenzhen 5600 40 PacSec 2011
  41. 41. rank 3 China 815,934 East Asia CN cn 90196 com 65413 dynamic 65060 163data 64647 broad 59136 adsl-pool 17127 sh 10473 xw 10398 net 10352 sx 10196 gd 9641 222 9297 fj 8826dynamic.163data.com.cn js 8531?? jlccptt 7820 zj 6900吉林省数据通信局 117 6687北京新网数码信息技术有限公司 125 6532?? 218 6371 60 6244 41 PacSec 2011
  42. 42. ALL cities N/A 978457 Moscow 285097 (RU:1) Beijing 240419 (CN:3) Seoul 180186 (KR) (1000000:1%) Taipei 161498 (TW:9) Kiev 117392 (RU:1) Saint 94560 (Petersburg ?) Bucharest 79336 (1940000:4%) Sofia 78445 (BG:13) New 72424 Petersburg 71175 (RU:1) Central 65635 (HK?) District 65485 (HK?) Bangkok 62882 (TH:18) Delhi 62563 (IN:8) Tokyo 54531 (JP:11) London 53514 (GB:4) Guangzhou 52981 (CN:3) Athens 52656 (3680000: 1.4%) Budapest 52031 (1,733,685: 3%) 42PacSec 2011
  43. 43. All the world net 2676477 co 171029 com 1369148 rr 170298 ru 869195 res 169568 dynamic 685144 ca 165639 dsl 430313 hinet 162089 comcast 303649 pl 160772 hsd1 303626 it 151052 br 244534 fr 146154 jp 226366 bb 143578 adsl 222170 hu 139452 cable 217597 sbcglobal 135016Comcast: High Speed Internet, au 203850 ua 133288Cable TV, and Phone Services Deals dyn 200646 pppoe 187455 pool 183580HiNet首頁台灣最大ISP,提供寬頻網路 static 180225 ne 173788 sbcglobal.net - Network Solutions broadband 173384 ?? 43 PacSec 2011
  44. 44. Demo: flying over Eurasia 10 millions of nodes in 24 hours ! 44 PacSec 2011
  45. 45. conclusionIn this presentation, we have shown the possibility of obtaining information of10,000,000 nodes in 24 hours.In current P2P and DHT network, each node can be easily monitored. Andthere are many challenges and interesting topics for illegal adoption ofBitTorrent.Our crawling system can provide the ranking of countries, cities and domainproviders.It is shown that DHT network is actually large and scalable network !BitTorrent has a huge potential to be alterative and unseen network architecture ! 45 PacSec 2011
  46. 46. Thank you for listening ! 46
  1. A particular slide catching your eye?

    Clipping is a handy way to collect important slides you want to go back to later.

×