Victim Routine Influences the Number of DDoS Attacks: Evidence from Dutch Educational Network

We study the influence of daily routines of Dutch academic institutions on the number of DDoS attacks targeting their infrastructures. We hypothesise that the attacks are motivated and harness the postulates of Routine Activity Theory (RAT) from criminology to analyse the data. We define routine periods in order to group days with similar activities and use 2.5 years of NetFlow alerts data measured by SURFnet to compare the number of alerts generated during each of these periods. Our analysis shows clear correlation between academic schedules and attack patterns on academic institutions. This leads us to believe that most of these attacks are not random and are initiated by someone who might benefit by disrupting scheduled educational activities.

[1]  Antje Baer,et al.  E Learning Strategies For Delivering Knowledge In The Digital Age , 2016 .

[2]  Taghi M. Khoshgoftaar,et al.  Utilizing Netflow Data to Detect Slow Read Attacks , 2018, 2018 IEEE International Conference on Information Reuse and Integration (IRI).

[3]  Aiko Pras,et al.  Booters — An analysis of DDoS-as-a-service attacks , 2015, 2015 IFIP/IEEE International Symposium on Integrated Network Management (IM).

[4]  Saman Taghavi Zargar,et al.  A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks , 2013, IEEE Communications Surveys & Tutorials.

[5]  Lawrence E. Cohen,et al.  Social Change and Crime Rate Trends: A Routine Activity Approach , 1979 .

[6]  Molly Sauter,et al.  “LOIC Will Tear Us Apart” , 2013 .

[7]  Vicente Segura,et al.  Modeling the Economic Incentives of DDoS Attacks: femtocell case study , 2009, WEIS.

[8]  Eric Jones,et al.  SciPy: Open Source Scientific Tools for Python , 2001 .

[9]  Jose Nazario,et al.  Politically Motivated Denial of Service Attacks , 2009 .

[10]  R. Brooner,et al.  Geophysical Variables and Behavior: XIV. Lunar Phase and Crime: Fact or Artifact , 1983 .

[11]  Ellen G. Cohn,et al.  Even criminals take a holiday: Instrumental and expressive crimes on major and minor holidays , 2003 .

[12]  David Maimon,et al.  Daily Trends and Origin of Computer-Focused Crimes Against a Large University Computer Network An Application of the Routine-Activities and Lifestyle Perspective , 2013 .