Blackhole

What is a blackhole ?

See the wikipedia definition first 😉

http://en.wikipedia.org/wiki/Black_hole_%28networking%29

For us, a blackhole(or Darknet)  is a set of ip adresses directly connected to Internet, without any computer connected. All inbound traffic is not solicitated. We can mesure networks attack on internet in real time  by this way.

Structure

Our plateforme is directly connected with the NICT in Japan, thanks to the collaboration with them.

 

Results

DataBase

For scientific research on data mining, the set of attacks in pcap and netflow format is available on demand. Please ask us for an access.

Visualisation tool

The NICT provides a couple of nice visualisation tools for realtime presentation. See :

Daedalus1

 

Nicter1

 

And some vids :