HTML5 Webook

45/64

NICT REPORT 43Research HighlightsFig.1 : NICTER darknet monitoring statisticsThe NICT Cybersecurity Re-search Institute has been oper-ating a large-scale cyberattack monitoring network (darknet monitoring) as part of the NICTER*1 project and has been monitoring cyberattack-related net-net monitoring network (about 300,000 IP addresses) rose to a total of 150.4 billion, which is about 560,000 packets per IP address per year (Fig.1).The total number of packets per year represents only the number of packets arriving within the range of the darknet monitored by NICTER and should not be interpreted as the number of at-tacks mounted throughout Japan or against government institutions.The total number of observed pack-ets per IP address per year keeps in-creasing each year (Fig.2) and from 2016 to 2017, this number increased by 1,2 times.Figure 3 shows the top 10 attack tar-gets (destination port numbers) ob-served by NICTER in 2017. The blue portions of this pie chart, which consti-tute more than half of the total, corre-“We raise our awareness of the need for ap-plying security measures to IoT devices too.”work packets*2 since 2005. The monitor-ing and analysis results of the NICTER project for 2017 (released in February 2018) are summarized below.Cyberattack-related network packets observed in 2017 on the NICTER dark-Fig.2 : Total number of observed packets per IP address per yearYearTotal packets (billion)# of darknet IP addressesPackets received per IP address20050.3116,00019,06620060.81100,00017,23120071.99100,00019,11820082.29120,00022,71020093.57120,00036,19020105.65120,00050,12820114.54120,00040,65420127.78190,00053,085201312.88210,00063,655201425.66240,000115,323201554.51280,000213,5232016128.1300,000469,1042017150.4300,000559,125NICTER Analysis Report 2017PROTECT