Print Email Facebook Twitter Bad Neighborhoods on the Internet Title Bad Neighborhoods on the Internet Author Moreira Moura, G.C. Sadre, R. Pras, A. Faculty Technology, Policy and Management Department POLG Date 2014-07-01 Abstract Analogous to the real world, sources of malicious activities on the Internet tend to be concentrated in certain networks instead of being evenly distributed. In this article, we formally define and frame such areas as Internet Bad Neighborhoods. By extending the reputation of malicious IP addresses to their neighbors, the bad neighborhood approach ultimately enables attack prediction from unforeseen addresses. We investigate spam and phishing bad neighborhoods, and show how their underlying business models, counter-intuitively, impacts the location of the neighborhoods (both geographically and in the IP addressing space). We also show how bad neighborhoods are highly concentrated at few Internet Service Providers and discuss how our findings can be employed to improve current network and spam filters and incentivize botnet mitigation initiatives. Subject internet securityspamphishinggeo-location To reference this document use: uuid:0107657f-41a7-418d-8a50-a35190d92439 Publisher IEEE Source IEEE Communications Magazine, 52 (7), 2014; preprint ISSN 0163-6804 Other version doi:10.1109/MCOM.2014.6852094 Part of collection Institutional Repository Document type journal article Rights (c) 2014 The Author(s) /islandora/object/uuid:0107657f-41a7-418d-8a50-a35190d92439/datastream/OBJ/view