Upload
ripe-meetings
View
760
Download
3
Embed Size (px)
DESCRIPTION
presented by Paul Palse in Anti Abuse Working Group at RIPE 60, Prague
Citation preview
RIPE Network Coordination Centre
http://www.ripe.net
Abuse Finder
Paul Palse Database Manager, RIPE NCC
RIPE 60 1 Paul Palse
http://www.ripe.net
RIPE Network Coordination Centre
Outline
• RIPE Database RESTful Query WS • Abuse Finder tool
RIPE 60 2 Paul Palse
http://www.ripe.net
RIPE Network Coordination Centre
Publications on RIPE Labs
• RIPE Database Query API in the form of RESTful Web Services: - REST allows for “create, read, update, and delete”
transactions over HTTP - Resources have a unique portable address in the form
of an URL - Web Service responds in XML and JSON - Response is easy to parse by script - XML can be easily transformed (to RPSL for example)
using style sheets - Protocol has big industry support. Google, Amazon…
RIPE 60 3 Paul Palse
http://www.ripe.net
RIPE Network Coordination Centre
“Abuse Finder” Use Case Search
• Precise answer to a specific question • Give me the Abuse Handler details for this network
resource? • We’ll do the data mining!
RIPE 60 4 Paul Palse
RIPE Network Coordination Centre
http://www.ripe.net
123.123.123.123
Find IRT info
Find Person or Role
Find Organisation and Route info
Add all referenced maintainer, admin and tech contacts
Harvest Abuse Mailbox details
The service accumulates the information
Then harvests contact details
Find comments that mention abuse
irt: irt-123 abuse-mailbox: [email protected] abuse-mailbox: [email protected] remarks
http://www.ripe.net
RIPE Network Coordination Centre
Abuse Finder Demo
RIPE 60 6 Paul Palse
http://www.ripe.net
RIPE Network Coordination Centre
Abuse Finder Service
• A “quick and dirty” script shows: - Roughly 50% of allocations are not covered by any
kind of abuse contact info.
• Go ahead, and start using the abuse finder API…
• Hint: Split Files + Abuse Finder + Script…
RIPE 60 7 Paul Palse
http://www.ripe.net
RIPE Network Coordination Centre
RIPE 60 8 Paul Palse
Questions?
RIPE Network Coordination Centre
http://www.ripe.net RIPE 60 9 Paul Palse