A Look at the Consequences of Internet Censorship through an ISP Lens
|
|
|
- Milton Fields
- 7 years ago
- Views:
Transcription
1 A Look at the Consequences of Internet Censorship through an ISP Lens Sheharbano Khattak (University of Cambridge)! Mobin Javed (UC Berkeley) Syed Ali Khayam (PLUMgrid) Zartash Afzal Uzmi (LUMS SBASSE, Pakistan) Vern Paxson (UC Berkeley, ICSI)
2 Agenda Problem Statement! Description of Dataset! Groundtruth Reconstruction! Analysis! Discussion
3 Consequences of Internet Censorship Effective policy requires informed perspectives on how humans actually respond to events
4 Consequences of Internet Censorship Effective policy requires informed perspectives on how humans actually respond to events! When a persistent censorship policy emerges:! Do users comply and stop accessing the blocked content or do they subvert censorship on a massive scale?! Does censorship hurt or benefit ISPs?! How much do competing content providers thrive?
5 Challenges Measuring consequences of censorship requires data snapshots before and after the events A vantage point that captures all traffic a user exchanges with the Internet
6 We examine one slice of this overall question (the consequences of Internet censorship) in the context of ISP customers in Pakistan
7 Agenda Problem Statement! Description of Dataset! Groundtruth Reconstruction! Analysis! Discussion
8 Description of Dataset! Network traces captured at a medium-sized Pakistani ISP at different points between Oct 11- Aug 13
9 Description of Dataset! Network traces captured at a medium-sized Pakistani ISP at different points between Oct 11- Aug 13 Represent snapshots around two major censorship events: Nov 11: Thousands of porn domains blocked Sep 12: YouTube blocked (continues to date..)
10 ! Description of Dataset 03Oct11! 22Oct11
11 ! Description of Dataset Porn blocked 03Oct11! 22Oct11
12 ! Description of Dataset Porn blocked 03Oct11! 21Dec11! 22Oct11 28Feb12
13 ! Description of Dataset Porn blocked 03Oct11! 21Dec11! 22Oct11 28Feb12 YouTube blocked
14 ! Description of Dataset Porn blocked 03Oct11! 21Dec11! 18Sep12! 22Oct11 28Feb12 YouTube blocked 02Aug13
15 ! Description of Dataset Porn blocked 03Oct11! 21Dec11! 18Sep12! 22Oct11 28Feb12 02Aug13 YouTube blocked! ~1.8 TB data! Entire analysis based on Bro protocol logs!
16 ! Description of Dataset Porn blocked 03Oct11! 21Dec11! 18Sep12! 22Oct11 28Feb12 02Aug13 YouTube blocked! ~1.8 TB data! Entire analysis based on Bro protocol logs! Individual traces! range between GB and 6-20 hours
17 ! Description of Dataset Porn blocked 03Oct11! 21Dec11! 18Sep12! 22Oct11 28Feb12 02Aug13 YouTube blocked! ~1.8 TB data! Entire analysis based on Bro protocol logs! Individual traces! range between GB and 6-20 hours! Traces split into Small Office/Home Office (SOHO) and Residential Traffic
18 Capture Location Can observe internal ISP data and! inbound/outbound traffic
19 Agenda Problem Statement! Description of Dataset! Groundtruth Reconstruction! Analysis! Discussion
20 Groundtruth Reconstruction We have historic dataset for which we lack ground truth:! What was blocked?! How was it blocked (DNS, TCP/IP, HTTP) Figure: Murdoch, Steven J. and Anderson, Ross (2008) Tools and technology of Internet filtering, in R. J. Deibert, J. G. Palfrey, R. Rohozinski, & J. Zittrain (Eds.) Access Denied: The Practice and Policy of Global Internet Filtering. Cambridge, MA: MIT Press.
21 Groundtruth Reconstruction Censorship Indicators: A blocking mechanism leaves a trail in network traces.! Ambiguous Indicators can occur because of legitimate reasons (server load, measurement loss)!!! Unambiguous Indicators can be exclusively attributed to censorship (DNS redirection)
22 Groundtruth Reconstruction High frequency of ambiguous indicators for known censored content implies censorship.! Known censored content: determined through a supplementary medium (e.g. newspapers)
23 Groundtruth Reconstruction High frequency of ambiguous indicators for known censored content implies censorship.! Known censored content: determined through a supplementary medium (e.g. newspapers)! Example: Consistently observe DNS No Response when the queried domain name is porn Domain Category DNS Reply facebook.com Social networking bad1.com Porn - bad2.com Porn - bbc.co.uk News
24 Porn Censorship Mechanism Porn blocked - DNS Redirection - DNS Redirection! - IP Block - DNS Redirection - DNS Redirection! - HTTP No Response!
25 YouTube Censorship Mechanism - DNS Redirection! - HTTP Redirection YouTube blocked - DNS Redirection! - HTTP No Response!
26 Agenda Problem Statement! Description of Dataset! Groundtruth Reconstruction! Analysis! Discussion
27 Analysis Impact on end users, content providers and service providers! Go over salient results in question/answer fashion
28 Analysis Consequences on content providers >What constitutes a content provider?! Determine porn content by classifying all websites occurring in our dataset by topic using McAfee URL categ. service porn All websites
29 Analysis Consequences on content providers >What constitutes a content provider?! Determine porn content by classifying all websites occurring in our dataset by topic using McAfee URL categ. service!!! porn All websites Competing content providers to YouTube determined by regional popularity (DailyMotion, Vimeo, TunePK)
30 Consequences on Users
31 What is user* response after viewing a block page? Give me bad.com Blocked! Network User * IP address + HTTP User Agent
32 * IP address + HTTP User Agent What is user* response after viewing a block page? Give me bad.com Blocked! Network User Monitor HTTP for 5 mins
33 What is user* response after Porn:! viewing a block page? 60% users perform search engine query (domain-specific)! 70% users access another porn domain! YouTube:! 75% users perform search engine query (information retrieval)! 7% users access an alternate video content provider on the day of block, rising to 12% a year later. * IP address + HTTP User Agent
34 Do residential users shift to alternate/free DNS resolvers? Traces No shift (~8% queries to! external DNS resolvers! consistent with previous! trend) ASN! of! DNS! Resolver DNS queries* for blocked content (YouTube/porn) * Percentage distribution
35 Do SOHO users shift to alternate/free DNS resolvers? Traces Local ISP drops from ~90%! to ~69% on the day of! YouTube block ASN! of! DNS! Resolver DNS queries* for blocked content (YouTube/porn) * Percentage distribution
36 Do SOHO users shift to alternate/free DNS resolvers? Traces ISP handles ~74% queries! (~90% pre-block) a year! after YouTube block ASN! of! DNS! Resolver DNS queries* for blocked content (YouTube/porn) * Percentage distribution
37 Does traffic generated by residential users change? Porn bandwidth (%) reduces! to half the average pre-block consumption
38 Does traffic generated by SOHO users change? Porn bandwidth (%) reduces! to 1/3 of the average pre-block consumption
39 Does traffic generated by SOHO users change? Video traffic reduces to 12% and a year later to ~5% from an average pre-block consumption of 50%
40 Does traffic generated by SOHO users change? Drastic increase in SSL! post YouTube block
41 Consequences on Content Providers
42 Does (residential*) user demand for porn content providers change? Ongoing churn in porn domains post block Traces Porn! content! providers! (anon.) Traffic Vol. from Top-5 Porn Domains** * Similar trend for SOHO users ** Percentage distribution
43 How is video traffic distributed among content providers? YouTube rules the world prior to the block
44 How is video traffic distributed among content providers? Competitors pick up the slack post YouTube block
45 How are users embedded video watch requests distributed among content providers? <iframe frameborder="0" width="600" height="300" src="// embed/video/x26ql41" allowfullscreen></iframe>
46 How are users embedded video watch requests distributed among content providers? Competitors get share in YouTube s pre-block dominant position in embedded video requests
47 Consequences on Operators
48 Where do operators fetch videos from? races ASN! of! video! content! prvdrs. Prior to YouTube block, ISP! gets to serve bandwidth hungry video locally Video Traffic Vol.
49 Where do operators fetch videos from? Traces Leakage due to caching! on the day of YouTube block ASN! of! video! content! prvdrs. Video Traffic Vol.
50 Where do operators fetch videos from? Traces ASN! of! video! content! prvdrs. Post YouTube block, ISP has to pay peers for it Video Traffic Vol.
51 Summary Porn block: significant lessening of traffic; some shifting to equivalent alternate sources Censor s presumed goal at least partially met
52 Summary Porn block: significant lessening of traffic; some shifting to equivalent alternate sources Censor s presumed goal at least partially met! YouTube block: Spurred some users to outsource their DNS Spurred shift to SSL Shifted cost structure: ISPs burdened, YouTube competitors thrived
53 Agenda Problem Statement! Description of Dataset! Groundtruth Reconstruction! Metrics! Analysis! Discussion
54 1. Collateral Damage on Blocked Content Provider We looked at how YouTube block impacts competing content providers YouTube vs. DailyMotion, Vimeo, TunePK
55 1. Collateral Damage on Blocked Content Provider We looked at how YouTube block impacts competing content providers YouTube vs. DailyMotion, Vimeo, TunePK! Identities on the Internet are not entirely isolated (YouTube, Google) What is the impact of YouTube block on other Google services?
56 Traffic to YouTube (as seen by Google) YouTube blocked
57 Traffic to Google Docs (as seen by Google) YouTube blocked
58 2. Impact on Ad Targeting (and Revenue?) What does the wide usage of circumvention tools mean for ad targeting?
59 2. Impact on Ad Targeting (and Revenue?) What does the wide usage of circumvention tools mean for ad targeting? Anonymise IP address >ad geotargeting is hurt Strip off HTTP cookie >ads cannot target user profile any more
60 Thanks Q&A!
A Look at the Consequences of Internet Censorship Through an ISP Lens
A Look at the Consequences of Internet Censorship Through an ISP Lens Sheharbano Khattak 1, Mobin Javed 2, Syed Ali Khayam 3, Zartash Afzal Uzmi 4, Vern Paxson 2,5 1 University of Cambridge, 2 UC Berkeley,
The Anatomy of Web Censorship in Pakistan
The Anatomy of Web Censorship in Pakistan Zubair Nabi zubair.nabi@cantab.net Information Technology University, Pakistan* Presented by: Mobin Javed UC Berkeley * Now at IBM Research, Dublin This website
CDN and Traffic-structure
CDN and Traffic-structure Outline Basics CDN Traffic Analysis 2 Outline Basics CDN Building Blocks Services Evolution Traffic Analysis 3 A Centralized Web! Slow content must traverse multiple backbones
How To Monitor A Network On A Network With Bro (Networking) On A Pc Or Mac Or Ipad (Netware) On Your Computer Or Ipa (Network) On An Ipa Or Ipac (Netrope) On
Michel Laterman We have a monitor set up that receives a mirror from the edge routers Monitor uses an ENDACE DAG 8.1SX card (10Gbps) & Bro to record connection level info about network usage Can t simply
Step-by-Step Configuration
Step-by-Step Configuration Kerio Technologies C 2001-2003 Kerio Technologies. All Rights Reserved. Printing Date: December 17, 2003 This guide provides detailed description on configuration of the local
McAfee Web Gateway Administration Intel Security Education Services Administration Course Training
McAfee Web Gateway Administration Intel Security Education Services Administration Course Training The McAfee Web Gateway Administration course from Education Services provides an in-depth introduction
A STUDY OF WORKLOAD CHARACTERIZATION IN WEB BENCHMARKING TOOLS FOR WEB SERVER CLUSTERS
382 A STUDY OF WORKLOAD CHARACTERIZATION IN WEB BENCHMARKING TOOLS FOR WEB SERVER CLUSTERS Syed Mutahar Aaqib 1, Lalitsen Sharma 2 1 Research Scholar, 2 Associate Professor University of Jammu, India Abstract:
User Guide. You will be presented with a login screen which will ask you for your username and password.
User Guide Overview SurfProtect is a real-time web-site filtering system designed to adapt to your particular needs. The main advantage with SurfProtect over many rivals is its unique architecture that
COMPARISON OF FIXED & VARIABLE RATES (25 YEARS) CHARTERED BANK ADMINISTERED INTEREST RATES - PRIME BUSINESS*
COMPARISON OF FIXED & VARIABLE RATES (25 YEARS) 2 Fixed Rates Variable Rates FIXED RATES OF THE PAST 25 YEARS AVERAGE RESIDENTIAL MORTGAGE LENDING RATE - 5 YEAR* (Per cent) Year Jan Feb Mar Apr May Jun
COMPARISON OF FIXED & VARIABLE RATES (25 YEARS) CHARTERED BANK ADMINISTERED INTEREST RATES - PRIME BUSINESS*
COMPARISON OF FIXED & VARIABLE RATES (25 YEARS) 2 Fixed Rates Variable Rates FIXED RATES OF THE PAST 25 YEARS AVERAGE RESIDENTIAL MORTGAGE LENDING RATE - 5 YEAR* (Per cent) Year Jan Feb Mar Apr May Jun
Examining How The Great Firewall Discovers Hidden Circumvention Servers
Examining How The Great Firewall Discovers Hidden Circumvention Servers Roya Ensafi, David Fifield, Philipp Winter, Nick Feamster, Nicholas Weaver, and Vern Paxson Oct 29, 2015 1 Circumventing Internet
Debugging With Netalyzr
Debugging With Netalyzr Christian Kreibich (ICSI), Nicholas Weaver (ICSI), Boris Nechaev (HIIT/TKK), and Vern Paxson (ICSI & UC Berkeley) 1 What Is Netalyzr?! Netalyzr is a comprehensive network measurement
Symantec's Secret Sauce for Mobile Threat Protection. Jon Dreyfus, Ellen Linardi, Matthew Yeo
Symantec's Secret Sauce for Mobile Threat Protection Jon Dreyfus, Ellen Linardi, Matthew Yeo 1 Agenda 1 2 3 4 Threat landscape and Mobile Insight overview What s unique about Mobile Insight Mobile Insight
The Value of Content Distribution Networks Mike Axelrod, Google axelrod@google.com. Google Public
The Value of Content Distribution Networks Mike Axelrod, Google axelrod@google.com Introduction Well understood facts: o Fast is better than slow but it costs more to be fast o Network has to be fast and
Week 3 / Paper 2. Bernhard Ager, Wolfgang Mühlbauer, Georgios Smaragdakis, Steve Uhlig ACM IMC 2010.
Week 3 / Paper 2 Comparing DNS Resolvers in the Wild Bernhard Ager, Wolfgang Mühlbauer, Georgios Smaragdakis, Steve Uhlig ACM IMC 2010. Main point How does ISP DNS compare with Google DNS and OpenDNS?
How the Great Firewall discovers hidden circumvention servers. Roya Ensafi David Fifield Philipp Winter Nick Weaver Nick Feamster Vern Paxson
How the Great Firewall discovers hidden circumvention servers Roya Ensafi David Fifield Philipp Winter Nick Weaver Nick Feamster Vern Paxson Much already known about GFW Numerous research papers and blog
Blackboard Collaborate Web Conferencing Hosted Environment Technical Infrastructure and Security
Overview Blackboard Collaborate Web Conferencing Hosted Environment Technical Infrastructure and Security Blackboard Collaborate web conferencing is available in a hosted environment and this document
DNS, CDNs Weds March 17 2010 Lecture 13. What is the relationship between a domain name (e.g., youtube.com) and an IP address?
DNS, CDNs Weds March 17 2010 Lecture 13 DNS What is the relationship between a domain name (e.g., youtube.com) and an IP address? DNS is the system that determines this mapping. Basic idea: You contact
MMGD0204 Web Application Technologies. Chapter 1 Introduction to Internet
MMGD0204 Application Technologies Chapter 1 Introduction to Internet Chapter 1 Introduction to Internet What is The Internet? The Internet is a global connection of computers. These computers are connected
Computing & Telecommunications Services Monthly Report March 2015
March 215 Monthly Report Computing & Telecommunications Services Monthly Report March 215 CaTS Help Desk (937) 775-4827 1-888-775-4827 25 Library Annex helpdesk@wright.edu www.wright.edu/cats/ Last Modified
Internet censorship in China
Internet censorship in China Steven J. Murdoch www.cl.cam.ac.uk/users/sjm217 OpenNet Initiative Computer Laboratory www.opennet.net Inter-Disciplinary China Studies Forum: Annual Conference, 14 April 2007,
SEO Presentation. Asenyo Inc.
SEO Presentation What is Search Engine Optimization? Search Engine Optimization (SEO) : PPC and Organic Results Pay Per Click Ads The means of achieving top search engine results without having to incur
1 Introduction: Network Applications
1 Introduction: Network Applications Some Network Apps E-mail Web Instant messaging Remote login P2P file sharing Multi-user network games Streaming stored video clips Internet telephone Real-time video
White Paper. Optimizing the video experience for XenApp and XenDesktop deployments with CloudBridge. citrix.com
Optimizing the video experience for XenApp and XenDesktop deployments with CloudBridge Video content usage within the enterprise is growing significantly. In fact, Gartner forecasted that by 2016, large
AT&T Global Network Client for Windows Product Support Matrix January 29, 2015
AT&T Global Network Client for Windows Product Support Matrix January 29, 2015 Product Support Matrix Following is the Product Support Matrix for the AT&T Global Network Client. See the AT&T Global Network
Domain Name Abuse Detection. Liming Wang
Domain Name Abuse Detection Liming Wang Outline 1 Domain Name Abuse Work Overview 2 Anti-phishing Research Work 3 Chinese Domain Similarity Detection 4 Other Abuse detection ti 5 System Information 2 Why?
SiteCelerate white paper
SiteCelerate white paper Arahe Solutions SITECELERATE OVERVIEW As enterprises increases their investment in Web applications, Portal and websites and as usage of these applications increase, performance
Case 2:08-cv-02463-ABC-E Document 1-4 Filed 04/15/2008 Page 1 of 138. Exhibit 8
Case 2:08-cv-02463-ABC-E Document 1-4 Filed 04/15/2008 Page 1 of 138 Exhibit 8 Case 2:08-cv-02463-ABC-E Document 1-4 Filed 04/15/2008 Page 2 of 138 Domain Name: CELLULARVERISON.COM Updated Date: 12-dec-2007
Inside Dropbox: Understanding Personal Cloud Storage Services
Inside Dropbox: Understanding Personal Cloud Storage Services Corneliu Claudiu Prodescu School of Engineering and Sciences Jacobs University Bremen Campus Ring 1, 28759 Bremen, Germany Monday 22 nd April,
Application Layer -1- Network Tools
EITF25 Internet: Technology and Applications Application Layer -1- Network Tools 2015, Lecture 08 Kaan Bür Previously on EITF25 Addressing above IP Ports, sockets Process-to-process delivery Transport
Should Internet Service Providers Fear Peer-Assisted Content Distribution?
Should Internet Service Providers Fear Peer-Assisted Content Distribution? Thomas Karagiannis, UC Riverside Pablo Rodriguez, Microsoft Research Cambridge Konstantina Papagiannaki, Intel Research Cambridge
Internet Content Distribution
Internet Content Distribution Chapter 4: Content Distribution Networks (TUD Student Use Only) Chapter Outline Basics of content distribution networks (CDN) Why CDN? How do they work? Client redirection
Internet Traffic Measurement
Internet Traffic Measurement Internet Traffic Measurement Network Monitor Placement Measurement Analysis Tools Measurement Result Reporting Probing Mechanism Vantage Points Edge vs Core Hardware vs Software
Content Delivery Networks
Content Delivery Networks Terena 2000 ftp://ftpeng.cisco.com/sgai/t2000cdn.pdf Silvano Gai Cisco Systems, USA Politecnico di Torino, IT sgai@cisco.com Terena 2000 1 Agenda What are Content Delivery Networks?
User Identification and Authentication
User Identification and Authentication Vital Security 9.2 Copyright Copyright 1996-2008. Finjan Software Inc.and its affiliates and subsidiaries ( Finjan ). All rights reserved. All text and figures included
<Insert Picture Here> Oracle Web Cache 11g Overview
Oracle Web Cache 11g Overview Oracle Web Cache Oracle Web Cache is a secure reverse proxy cache and a compression engine deployed between Browser and HTTP server Browser and Content
Single Pass Load Balancing with Session Persistence in IPv6 Network. C. J. (Charlie) Liu Network Operations Charter Communications
Single Pass Load Balancing with Session Persistence in IPv6 Network C. J. (Charlie) Liu Network Operations Charter Communications Load Balancer Today o Load balancing is still in use today. It is now considered
Information- Centric Networks. Section # 3.2: DNS Issues Instructor: George Xylomenos Department: Informatics
Information- Centric Networks Section # 3.2: DNS Issues Instructor: George Xylomenos Department: Informatics Funding These educational materials have been developed as part of the instructors educational
Collax Web Security. Howto. This howto describes the setup of a Web proxy server as Web content filter.
Collax Web Security Howto This howto describes the setup of a Web proxy server as Web content filter. Requirements Collax Business Server Collax Security Gateway Collax Platform Server including Collax
February 2014. Considerations When Choosing a Secure Web Gateway
February 2014 Considerations When Choosing a Secure Web Gateway Introduction Evaluating a Secure Web Gateway (SWG) can be a complicated process and nothing is better than testing a solution in your own
Know Your Foe. Threat Infrastructure Analysis Pitfalls
Know Your Foe Threat Infrastructure Analysis Pitfalls Who Are We? Founders of PassiveTotal Analysts/researchers with 10+ years of collective experience Interested in Better UX/UI for security systems Improving/re-thinking
Goldman Sachs Conference. 22 May 2014 1
Goldman Sachs Conference 22 May 2014 1 Delivering growth in shareholder returns BoB Internet and phone in one. Launches Mobile services Launches Fetch TV services First ISP to offer NBN services BoB2 Launches
This chapter describes how to use the Junos Pulse Secure Access Service in a SAML single sign-on deployment. It includes the following sections:
CHAPTER 1 SAML Single Sign-On This chapter describes how to use the Junos Pulse Secure Access Service in a SAML single sign-on deployment. It includes the following sections: Junos Pulse Secure Access
HW2 Grade. CS585: Applications. Traditional Applications SMTP SMTP HTTP 11/10/2009
HW2 Grade 70 60 CS585: Applications 50 40 30 20 0 0 2 3 4 5 6 7 8 9 0234567892022223242526272829303323334353637383940442 CS585\CS485\ECE440 Fall 2009 Traditional Applications SMTP Simple Mail Transfer
Content Delivery Networks (CDN) Dr. Yingwu Zhu
Content Delivery Networks (CDN) Dr. Yingwu Zhu Web Cache Architecure Local ISP cache cdn Reverse Reverse Proxy Reverse Proxy Reverse Proxy Proxy L4 Switch Content Content Content Server Content Server
Why an Intelligent WAN Solution is Essential for Mission Critical Networks
Why an Intelligent WAN Solution is Essential for Mission Critical Networks White Paper Series WP100135 Charles Tucker Director of Marketing June 1, 2006 Abstract: Reliable Internet connectivity is now
How the Netflix ISP Speed Index Documents Netflix Congestion Problems
How the Netflix ISP Speed Index Documents Netflix Congestion Problems By Peter Sevcik June 2014 NetForecast Report NFR5117 2014 NetForecast, Inc. As of this writing, a comedic YouTube video featuring Netflix
Analysing the impact of CDN based service delivery on traffic engineering
Analysing the impact of CDN based service delivery on traffic engineering Gerd Windisch Chair for Communication Networks Technische Universität Chemnitz Gerd Windisch - Chair for Communication Networks
How To Test Performance Of A Cdn Server
On the Use and Performance of Content Distribution Networks Yin Zhang Joint work with Balachander Krishnamurthy and Craig Wills AT&T Labs Research, WPI {yzhang,bala}@research.att.com, cew@cs.wpi.edu ACM
End of Life Content Report November 2014. Produced By The NHS Choices Reporting Team CH.NHSChoices-Reporting@nhs.net
End of Life Content Report November 2014 Produced By The NHS Choices Reporting Team CH.NHSChoices-Reporting@nhs.net End of Life Dashboard Page 1 Overall Choices Site Visits Tag cloud showing end of life
http://docs.trendmicro.com/en-us/enterprise/safesync-for-enterprise.aspx
Trend Micro Incorporated reserves the right to make changes to this document and to the product described herein without notice. Before installing and using the product, review the readme files, release
Managing Users and Identity Stores
CHAPTER 8 Overview ACS manages your network devices and other ACS clients by using the ACS network resource repositories and identity stores. When a host connects to the network through ACS requesting
Bypassing Internet Censorship for News Broadcasters
Bypassing Internet Censorship for News Broadcasters Karl Kathuria British Broadcasting Corporation and Canada Centre for Global Security Studies Munk School of Global Affairs, University of Toronto Abstract
Overlay Networks. Slides adopted from Prof. Böszörményi, Distributed Systems, Summer 2004.
Overlay Networks An overlay is a logical network on top of the physical network Routing Overlays The simplest kind of overlay Virtual Private Networks (VPN), supported by the routers If no router support
Proxy Services: Good Practice Guidelines
Programme NPFIT DOCUMENT RECORD ID KEY Sub-Prog / Project Information Governance Prog. Director Mark Ferrar Owner Tim Davis Version 1.0 Author James Wood Version Date 26/01/2006 Status APPROVED Proxy Services:
Ranch Networks for Hosted Data Centers
Ranch Networks for Hosted Data Centers Internet Zone RN20 Server Farm DNS Zone DNS Server Farm FTP Zone FTP Server Farm Customer 1 Customer 2 L2 Switch Customer 3 Customer 4 Customer 5 Customer 6 Ranch
2010 Circumvention Tool Usage Report
2010 Circumvention Tool Usage Report Hal Roberts, Ethan Zuckerman, Jillian York, Robert Faris, and John Palfrey The Berkman Center for Internet & Society October 2010 Each co-author is affiliated with
Lab Exercise SSL/TLS. Objective. Step 1: Open a Trace. Step 2: Inspect the Trace
Lab Exercise SSL/TLS Objective To observe SSL/TLS (Secure Sockets Layer / Transport Layer Security) in action. SSL/TLS is used to secure TCP connections, and it is widely used as part of the secure web:
The mobile opportunity: How to capture upwards of 200% in lost traffic
June 2014 BrightEdge Mobile Share Report The mobile opportunity: How to capture upwards of 200% in lost traffic You ve likely heard that mobile website optimization is the next frontier, and you ve probably
Application-layer protocols
Application layer Goals: Conceptual aspects of network application protocols Client server paradigm Service models Learn about protocols by examining popular application-level protocols HTTP DNS Application-layer
Where Do You Tube? Uncovering YouTube Server Selection Strategy
Where Do You Tube? Uncovering YouTube Server Selection Strategy Vijay Kumar Adhikari, Sourabh Jain, Zhi-Li Zhang University of Minnesota- Twin Cities Abstract YouTube is one of the most popular video sharing
A Tool for Evaluation and Optimization of Web Application Performance
A Tool for Evaluation and Optimization of Web Application Performance Tomáš Černý 1 cernyto3@fel.cvut.cz Michael J. Donahoo 2 jeff_donahoo@baylor.edu Abstract: One of the main goals of web application
ACE Management Server Deployment Guide VMware ACE 2.0
Technical Note ACE Management Server Deployment Guide VMware ACE 2.0 This technical note provides guidelines for the deployment of VMware ACE Management Servers, including capacity planning and best practices.
GLOBAL SERVER LOAD BALANCING WITH SERVERIRON
APPLICATION NOTE GLOBAL SERVER LOAD BALANCING WITH SERVERIRON Growing Global Simply by connecting to the Internet, local businesses transform themselves into global ebusiness enterprises that span the
How to Configure Captive Portal
How to Configure Captive Portal Captive portal is one of the user identification methods available on the Palo Alto Networks firewall. Unknown users sending HTTP or HTTPS 1 traffic will be authenticated,
HOW DOES GOOGLE ANALYTICS HELP ME?
Google Analytics HOW DOES GOOGLE ANALYTICS HELP ME? Google Analytics tells you how visitors found your site and how they interact with it. You'll be able to compare the behavior and profitability of visitors
Google Product. Google Module 1
Google Product Overview Google Module 1 Google product overview The Google range of products offer a series of useful digital marketing tools for any business. The clear goal for all businesses when considering
Rogue DNS servers a case study
Rogue DNS servers a case study Feike Hacquebord Forward Looking Threat Research, Trend Micro Cupertino, CA, USA feikehayo_hacquebord@trendmicro.com Contents Introduction to DNS DNS Changer Trojans Rogue
Internet Technologies. World Wide Web (WWW) Proxy Server Network Address Translator (NAT)
Internet Technologies World Wide Web (WWW) Proxy Server Network Address Translator (NAT) What is WWW? System of interlinked Hypertext documents Text, Images, Videos, and other multimedia documents navigate
Step-by-Step Configuration
Step-by-Step Configuration Kerio Technologies Kerio Technologies. All Rights Reserved. Printing Date: August 15, 2007 This guide provides detailed description on configuration of the local network which
Internet Content Filtering in Australia
Internet Content Filtering in Australia What it is and isn t Paul Brooks Director ISOC-AU pbrooks@layer10.com.au Agenda Planning for the trial Content Filtering Technical Trial Trial Results Next Steps
Data Sheet. VLD 500 A Series Viaedge Load Director. VLD 500 A Series: VIAEDGE Load Director
Data Sheet VLD 500 A Series Viaedge Load Director VLD 500 A Series: VIAEDGE Load Director VLD : VIAEDGE Load Director Key Advantages: Server Load Balancing for TCP/UDP based protocols. Server load balancing
CHAPTER 4 PERFORMANCE ANALYSIS OF CDN IN ACADEMICS
CHAPTER 4 PERFORMANCE ANALYSIS OF CDN IN ACADEMICS The web content providers sharing the content over the Internet during the past did not bother about the users, especially in terms of response time,
How It Works: 101: Naming, Addressing, Routing ALAIN DURAND ICANN53 2015-06-21
How It Works: 101: Naming, Addressing, Routing ALAIN DURAND ICANN53 2015-06-21 Agenda Networking by Numbers Naming Addressing Routing 2 Networking by Numbers Layer 1 to layer 9 examples Layer 0: Physical
FortiGuard Web Content Filtering versus Websense March 2005
FortiGuard Web Content Filtering versus Websense March 2005 FortiGuard Web Filtering offers schools and enterprises a cost effective and easy to deploy solution to enforce safe and acceptable web usage
Digital media glossary
A Ad banner A graphic message or other media used as an advertisement. Ad impression An ad which is served to a user s browser. Ad impression ratio Click-throughs divided by ad impressions. B Banner A
LDAP Authentication and Authorization
LDAP Authentication and Authorization What is LDAP Authentication? Today, the network can include elements such as LANs, WANs, an intranet, and the Internet. Many enterprises have turned to centralized
Censorship In The Wild: A Measurement-based Analysis of Internet Filtering in Syria
Censorship In The Wild: A Measurement-based Analysis of Internet Filtering in Syria Emiliano De Cristofaro (University College London) Joint work with: A. Chaabane, T. Chen, A. Friedman, M. Cunche, D.
The following multiple-choice post-course assessment will evaluate your knowledge of the skills and concepts taught in Internet Business Associate.
Course Assessment Answers-1 Course Assessment The following multiple-choice post-course assessment will evaluate your knowledge of the skills and concepts taught in Internet Business Associate. 1. A person
How Comcast Built An Open Source Content Delivery Network National Engineering & Technical Operations
How Comcast Built An Open Source Content Delivery Network National Engineering & Technical Operations Jan van Doorn Distinguished Engineer VSS CDN Engineering 1 What is a CDN? 2 Content Router get customer
Towards a Comprehensive Picture of the Great Firewall s DNS Censorship
Towards a Comprehensive Picture of the Great Firewall s DNS Censorship Anonymous zion.vlab2@gmail.com Abstract China s Great Firewall passively inspects network traffic and disrupts unwanted communication
Market Assessment & Campaign SLA Calculator LOGO WE OPEN THE DOOR, SO YOU CAN CLOSE IT.
Market Assessment & Campaign SLA Calculator LOGO WE OPEN THE DOOR, SO YOU CAN CLOSE IT. Your Market Assessment Overview Your Inbound Market Assessment and Campaign SLA Calculator is broken down into several
DOSarrest Security Services (DSS) Version 4.0
DOSarrest Security Services (DSS) Version 4.0 DOSarrest DSS User Guide The DSS is the main customer portal where customers can view and manipulate traffic statistics from a wide variety of variables that
FAQ: BroadLink Multi-homing Load Balancers
FAQ: BroadLink Multi-homing Load Balancers BroadLink Overview Outbound Traffic Inbound Traffic Bandwidth Management Persistent Routing High Availability BroadLink Overview 1. What is BroadLink? BroadLink
Cisco & Big Data Security
Cisco & Big Data Security 巨 量 資 料 的 傳 輸 保 護 Joey Kuo Borderless Networks Manager hskuo@cisco.com The any-to-any world and the Internet of Everything is an evolution in connectivity and collaboration that
Combining Global Load Balancing and Geo-location with Emissary TM
Combining Global Load Balancing and Geo-location with Emissary TM A New Kind of Global Internet Traffic Management Appliance from Coyote Point Systems and Digital Envoy Establishing a Geo-Sensitive, Highly
Privacy leakage vs. Protection measures: the growing disconnect
Privacy leakage vs. Protection measures: the growing disconnect Balachander Krishnamurthy (AT&T Labs Research) Konstantin Naryshkin (Worcester Polytechnic Institute) Craig E. Wills (Worcester Polytechnic
What is a Mobile Responsive Website?
Moreandmoreofyourtargetaudienceis viewingwebsitesusingsmartphonesand tablets. What is a Mobile Responsive Website? Web Design is the process of creating a website to represent your business, brand, products
AD Account Lockout Investigation and Root Cause Analysis
AD Account Lockout Investigation and Root Cause Analysis Allen Chin Principal Consultant allen_chin@symantec.com 1 Contents 1 Background Issue 2 What was done 3 What were discovered 4 Recommendations 5
Basheer Al-Duwairi Jordan University of Science & Technology
Basheer Al-Duwairi Jordan University of Science & Technology Outline Examples of using network measurements /monitoring Example 1: fast flux detection Example 2: DDoS mitigation as a service Future trends
Workday Mobile Security FAQ
Workday Mobile Security FAQ Workday Mobile Security FAQ Contents The Workday Approach 2 Authentication 3 Session 3 Mobile Device Management (MDM) 3 Workday Applications 4 Web 4 Transport Security 5 Privacy
How To Write A Blog Post On Dropbox
Inside Dropbox: Understanding Personal Cloud Storage Services Idilio Drago Marco Mellia Maurizio M. Munafò Anna Sperotto Ramin Sadre Aiko Pras IMC 2012 Boston Motivation and goals 1/14 Personal cloud storage
ZEN LOAD BALANCER EE v3.02 DATASHEET The Load Balancing made easy
ZEN LOAD BALANCER EE v3.02 DATASHEET The Load Balancing made easy OVERVIEW The global communication and the continuous growth of services provided through the Internet or local infrastructure require to
WEBSITE AND MARKETING REPORT. Prepared for www.triadinstallations.com
WEBSITE AND MARKETING REPORT Prepared for www.triadinstallations.com December 17, 2015 www.triadinstallations.com SEO ISSUES FOUND ON YOUR SITE (DECEMBER 15, 2015) This report shows the SEO issues that,
DNS Record Injection Vulnerabilities in Home Routers
DNS Record Injection Vulnerabilities in Home Routers Kyle Schomp, Tom Callahan, Michael Rabinovich, Mark Allman Case Western Reserve University International Computer Science Institute 1 Attacks targeting
Solution Brief FortiMail for Service Providers. Nathalie Rivat
Solution Brief FortiMail for Service Providers Nathalie Rivat Agenda FortiMail for Internet Service Providers Outbound antispam to prevent blacklisting MMS routing for Mobile Operators Inbound antispam
FAQs for Oracle iplanet Proxy Server 4.0
FAQs for Oracle iplanet Proxy Server 4.0 Get answers to the questions most frequently asked about Oracle iplanet Proxy Server Q: What is Oracle iplanet Proxy Server (Java System Web Proxy Server)? A: Oracle
NAT usage in Residential Broadband Networks
NAT usage in Residential Broadband Networks Gregor Maier 1,3, Fabian Schneider 2,3, and Anja Feldmann 3 1 International Computer Science Institute, Berkeley, CA, USA 2 UPMC Sorbonne Universités and CNRS,
Uncovering the Big Players of the Web
Uncovering the Big Players of the Web 3 rd TMA Workshop Vienna March 12 Vinicius Gehlen Alessandro Finamore Marco Mellia Maurizio M. Munafò TMA COST Action Introduction 2 Nowadays Internet traffic volume
ALTO and Content Delivery Networks dra7- penno- alto- cdn
ALTO and Content Delivery Networks dra7- penno- alto- cdn Stefano Previdi, sprevidi@cisco.com Richard Alimi, ralimi@google.com Jan Medved, jmedved@juniper.net Reinaldo Penno, rpenno@juniper.net Richard