<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class=""><span class="" style="font-size: 14px; orphans: 2; widows: 2;">UNIVERSITY OF CHICAGO</span><br class="" style="font-size: 14px; orphans: 2; widows: 2;"><span class="" style="font-size: 14px; orphans: 2; widows: 2;">DEPARTMENT OF COMPUTER SCIENCE</span></div><div class="" style="orphans: 2; widows: 2;"><span class="" style="font-size: 14px;">PRESENTS</span></div><div class="" style="orphans: 2; widows: 2;"><span class="" style="font-size: 14px;"><br class=""></span></div><div class="" style="orphans: 2; widows: 2;"><img apple-inline="yes" id="2124A90B-DBF3-420B-96AE-8158CDA47AE6" height="97" width="116" apple-width="yes" apple-height="yes" src="cid:4EBE35F9-0B40-4BE9-AAC2-2E7FEC0092FA@cs.uchicago.edu" class=""></div><div class="" style="orphans: 2; widows: 2;"><br class=""></div><div class="" style="orphans: 2; widows: 2;"><div class="" style="margin: 0in 0in 0.0001pt;"><span class="" style="font-size: 14px;"><b class="">Paul Pearce</b></span></div><div class="" style="margin: 0in 0in 0.0001pt;"><span class="" style="font-size: 14px;"><b class="">University of California, Berkeley</b></span></div><div class="" style="margin: 0in 0in 0.0001pt;"><br class=""></div><div class="" style="margin: 0in 0in 0.0001pt;"><b class=""><font class="" style="font-size: 14px;"><br class=""></font></b></div><div class="" style="margin: 0in 0in 0.0001pt;"><span class="" style="font-size: 14px;"><b class=""><font class="">Wednesday, March 7, 2018 at 2:30 pm <br class="">Ryerson 251</font></b><br class=""></span></div></div><div class="" style="orphans: 2; widows: 2;"><span class="" style="font-size: 14px;"><br class=""></span></div><div class=""><br class=""></div><div class=""><div class=""><b class="" style="color: rgb(33, 33, 33); font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 14px;">Title: </b><font color="#212121" face="Roboto, Helvetica, Arial, sans-serif" class=""><span class="" style="font-size: 14px;">Methods and Systems for Understanding Large-Scale Internet Threats</span></font></div><div class="" style="color: rgb(33, 33, 33); font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 14px;"><b class=""><br class=""></b></div><div class="" style="color: rgb(33, 33, 33); font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 14px;"><b class="">Abstract:</b></div><div class=""><font color="#212121" face="Roboto, Helvetica, Arial, sans-serif" class=""><span class=""><span class="" style="font-size: 14px;">The value and power mediated by the global, interconnected systems of today’s Internet attract adversaries who seek to exploit these systems for economic, political or social gain. Yet, the underlying complexity of Internet infrastructure, the layering of its services, and the indirect nature of its business relationships can make it challenging to identify even the existence of adversaries manipulating systems for their benefit.<br class=""><br class="">In this talk I present systems and methods to uncover and explore two such large-scale adversarial activities, Internet-wide cybercrime and censorship. I begin with an in-depth exploration of ZeroAccess, a complex peer-to-peer botnet which served as a delivery platform for advertising abuse malware for more than four years and impacted millions of users. I identify innovative attacks and fraudulent business relationships within the advertising ecosystem stemming from complex multi-hop ad reseller chains, resulting in millions of dollars in fraud per month. These relationships and explorations were used as a focal point for fraud remediation and a takedown of the botnet.<br class=""><br class="">Next I present Augur, a measurement technique and accompanying system that uses highly noisy TCP/IP side channels to measure reachability between two Internet locations without access to the endpoints or the path between them. Augur uses sequential hypothesis testing to provide statistical confidence in the face of network and side channel noise. I then use Augur to perform a global censorship measurement study of the blocking practices of more than 180 countries.<br class=""><br class=""><br class=""></span></span></font><b class="" style="color: rgb(33, 33, 33); font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 14px;">Bio:</b></div><div class=""><font color="#212121" face="Roboto, Helvetica, Arial, sans-serif" class=""><span class="" style="font-size: 14px;">Paul Pearce is a PhD Candidate at UC Berkeley advised by Vern Paxson and a member of the Center for Evidence-based Security Research (CESR). By developing Internet-scale measurement platforms and new empirical methods, his research brings grounding and understanding to the study of large-scale, hidden Internet<br class="">security problems. His work spans the areas of cybercrime, censorship, and "advanced persistent threats" (APTs). His work has been distinguished at the IEEE Symposium on Security and Privacy, and he has been recognized as an EECS Distinguished Graduate Student Instructor.</span></font></div><div class=""><font color="#212121" face="Roboto, Helvetica, Arial, sans-serif" class=""><span class="" style="font-size: 14px;"><br class=""></span></font></div><div class=""><b class="" style="color: rgb(33, 33, 33); font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 14px;">Host: Ben Zhao</b></div><div class=""><div class="" style="color: rgb(33, 33, 33); font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 14px;"><br class=""></div><div class="" style="color: rgb(33, 33, 33); font-family: Roboto, Helvetica, Arial, sans-serif;"><i class=""><font size="2" class="">Refreshments served after the talk in Ry. 255</font></i></div><div class="" style="color: rgb(33, 33, 33); font-family: Roboto, Helvetica, Arial, sans-serif;"><i class=""><font size="2" class=""><br class=""></font></i></div><div class="" style="color: rgb(33, 33, 33); font-family: Roboto, Helvetica, Arial, sans-serif;"><i class=""><font size="2" class=""><b class="" style="font-size: 12px; font-style: normal;"><i class="">Link to PDF: </i></b></font></i><a href="https://www.cs.uchicago.edu/sites/cs/files/uploads/seminar_announcements/Pearce poster.pdf" class="">https://www.cs.uchicago.edu/sites/cs/files/uploads/seminar_announcements/Pearce%20poster.pdf</a></div></div></div></body></html>