Today, the Internet security community largely emphasizes cyberspace monitoring for the
purpose of generating cyber intelligence. In this paper, we present a survey on darknet. The …

Distributed Denial of Service (DDoS) activities continue to dominate today's attack
landscape. This work proposes a DDoS forecasting model to provide significant insights to …

Motivated by recent cyber attacks that were facilitated through probing, limited cyber security
intelligence and the lack of accuracy that is provided by scanning detection systems, this …

An effective approach to gather cyber threat intelligence is to collect and analyze traffic
destined to unused Internet addresses known as darknets. In this paper, we elaborate on …

We present in this paper an approach that is composed of two techniques that respectively
tackle the issues of detecting corporate cyber scanning and clustering distributed …

This work proposes a distributed denial‐of‐service (DDoS) inference and forecasting model
that aims at providing insights to organizations, security operators, and emergency response …

Probing is often the primary stage of an intrusion attempt that enables an attacker to
remotely locate, target, and subsequently exploit vulnerable systems. This paper attempts to …

Darknet monitoring provides us an effective way to countermeasure cyber attacks that pose
a significant threat to network security and management. This paper aims to characterize the …

This paper uniquely leverages unsolicited real darknet data to propose a novel system, CSC-
Detector, that aims at identifying Cyber Scanning Campaigns. The latter define a new …

Network change detection is a common prerequisite for identifying anomalous behaviours in
computer, telecommunication, enterprise and social networks. Data mining of such networks …