Backscatter-2008 (02/20/2008 to 12/31/2008)

Information useful for longitudinal study of denial-of-service (DoS) attacks. This dataset currently consists of IPv4 packets sent by DoS attack victims in response to spoofed attack traffic. This backscatter from victims was collected by the UCSD Network Telescope. Data collection is planned for one week in February, May, August and November in 2008, and the 2 day DITL 2008 measurement event in March. Possible uses of this data include modeling DoS attacks, understanding victim populations, and using real packet traces to validate algorithms for detecting or classifying malicious traffic. This last use is particularly valuable because it is extremely challenging to artificially generate the kind of real-world noise present on the Internet.