A N N O U N C E M E N T --- HIGHLY PREDICTIVE BLACKLISTS (HPBs):
A new service provided by DShield.org and SRI International.
6 April 2007

DShield.org has established a new experimental custom source address blacklist generation service available to all DShield.org contributors. This new service utilizes a radically different approach to blacklist formulation called the Highly Predictive Blacklisting. Each DShield contributor is provided a unique HPB that reflects the most probable set of source addresses that will connect to that contributor's network over a prediction window that may last several days into the future. To produce this list, the HPB algorithm utilizes an address ranking scheme that prioritizes the entries of the blacklist based on how frequently each address is observed by other peer DShield contributors who share significant overlap in reporting common attack sources.

AVAILABILITY

Highly Predictive Blacklists are available to all DShield log contributors through the DShield.org website at http://www.dshield.org/hpbinfo.html and are explained in greater detail at http://www.cyber-ta.org/releases/HPB/.

Your feedback welcome at: hpb@dshield.org

ACKNOWLEDGEMENTS

The Highly Predictive Algorithm is a research prototype developed by the Computer Science Laboratory at SRI International in collaboration with DShield.Org: Jian Zhang (SRI), Phillip Porras (SRI), and Johannes Ullrich (DShield.org).


--------------
The Highly Predictive Blacklist Generator is an application developed under the Cyber-TA Project (www.cyber-ta.org)