Aggregated Daily RSDoS Attack Metadata

This dataset contains meta-data of the randomly spoofed denial-of-service attacks inferred from the backscatter packets collected by the UCSD Network Telescope. It is aggregated from the raw Telescope data using the criteria described in the paper Inferring Internet Denial-of-Service Activity (2006) by Moore et al. This dataset is updated every day, and contains data starting October 1st 2008.

Data and Resources

Field Value
creationMethod <p><span style="color: rgb(0, 0, 0);">To generate this RSDoS Attack Metadata dataset, we process 5-minute intervals of the&nbsp;</span><a href="https://www.caida.org/catalog/datasets/telescope-near-real-time_dataset/" rel="noopener noreferrer" target="_blank" style="background-color: rgb(255, 255, 255);">raw telescope data</a><span style="color: rgb(0, 0, 0);">&nbsp;extracting the response packets sent by victims of randomly and uniformly spoofed Denial-of-Service attacks (</span><a href="https://www.caida.org/projects/network_telescope/" rel="noopener noreferrer" target="_blank" style="background-color: rgb(255, 255, 255);">backscatter packets</a><span style="color: rgb(0, 0, 0);">). Activity that related to the same victim is summarized in an 'attack vector', following the definitions and methodology described by&nbsp;</span><a href="https://catalog.caida.org/details/paper/2006_backscatter_dos/" rel="noopener noreferrer" target="_blank" style="background-color: rgb(255, 255, 255);">Moore&nbsp;<em>et al.</em></a><span style="color: rgb(0, 0, 0);">&nbsp;(2006). We continue to update the attack vectors as long as related activity is still observed.</span></p><p><br></p><p><span style="color: rgb(56, 63, 69);">Once an attack completed, we record the accumulated statistics. We also geolocate the targeted IP address using&nbsp;</span><a href="https://www.digitalelement.com/solutions/netacuity-edge-premium/" rel="noopener noreferrer" target="_blank" style="color: rgb(63, 84, 129); background-color: rgb(255, 255, 255);"><em>NetAcuity Edge Premium Edition</em></a><span style="color: rgb(56, 63, 69);">&nbsp;data and determine its origin AS using&nbsp;</span><em style="color: rgb(56, 63, 69);">Routeviews Prefix-to-AS mappings</em><span style="color: rgb(56, 63, 69);">&nbsp;(</span><a href="https://www.caida.org/catalog/datasets/routeviews-prefix2as/" rel="noopener noreferrer" target="_blank" style="color: rgb(63, 84, 129); background-color: rgb(255, 255, 255);">pfx2as</a><span style="color: rgb(56, 63, 69);">) data. For more information please see the </span><a href="https://www.caida.org/projects/network_telescope/docs/data/dos/" rel="noopener noreferrer" target="_blank" style="color: rgb(56, 63, 69);">RSDoS documentation</a></p><p><br></p>
dataAuthType public
dataType avro
datasetPageUrl https://catalog.caida.org/dataset/telescope_daily_rsdos
docsURL https://catalog.caida.org/dataset/telescope_daily_rsdos
doi https://doi.org/10.21986/CAIDA.DATA.TELESCOPE-DAILY-RSDOS
issueDate 2008-10-01
lastUpdateDate 2025-12-03
license other
min_gpu {}
ndp_creator_md5 10b82778352e3fc35792c701663926a9
otherLicense https://www.caida.org/about/legal/aua/public_aua/
pocEmail info@caida.org
pocName CAIDA
pocWebsite https://catalog.caida.org
req_gpu {}
status submitted
theme []
updateFreq daily
uploadType dataset
Tags
  • caida
  • denial-of-service
  • security
  • telescope
  • telescope-rsdos-daily
  • ucsd-network-telescope
isopen False
metadata_created 2026-10-30T16:31:10.200479
metadata_modified 2026-10-30T16:31:10.200483
notes <p><span style="background-color: transparent; color: rgb(0, 0, 0);">This dataset contains meta-data of the randomly spoofed denial-of-service attacks inferred from the backscatter packets collected by the UCSD Network Telescope. It is aggregated from the raw Telescope data using the criteria described in the paper Inferring Internet Denial-of-Service Activity (2006) by Moore et al. This dataset is updated every day, and contains data starting October 1st 2008.</span></p>
num_resources 1
num_tags 6
title Aggregated Daily RSDoS Attack Metadata