ZMap: Fast internet-wide scanning and its security applications

Proceedings of the 22nd USENIX Security Symposium

Volumn , Issue , 2013, Pages 605-619

  Durumeric, Zakir ^a   Wustrow, Eric ^a   Halderman, J Alex ^a  

^a UNIVERSITY OF MICHIGAN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SCANNING; SURVEYS;

DEFENSIVE MECHANISM; GIGABIT ETHERNET; HIGH SPEED INTERNET; NETWORK SCANNING; OPEN-SOURCE NETWORK; SECURITY APPLICATION; SECURITY IMPLICATIONS; SINGLE- MACHINES;

NETWORK SECURITY;

EID: 85064040125     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (38)

1. Anonymous. Internet census 2012. http://census2012.sourceforge.net/paper.html, March 2013.
2. G. Bartlett, J. Heidemann, and C. Papadopoulos. Understanding passive and active service discovery. In 7th ACM SIGCOMM conference on Internet measurement (IMC), pages 57-70, 2007.
3. L. Bello. DSA-1571-1 OpenSSL - Predictable random number generator, 2008. Debian Security Advisory. http://www.debian.org/security/2008/dsa-1571.
4. D. J. Bernstein. SYN cookies. http://cr.yp.to/syncookies.html, 1996.
5. J. Black, S. Halevi, H. Krawczyk, T. Krovetz, and P. Rogaway. UMAC: Fast and secure message authentication. In Advances in Cryptology - CRYPTO '99, 1999.
6. S. Blake-Wilson, M. Nystrom, D. Hopwood, J. Mikkelsen, and T. Wright. Transport Layer Security (TLS) Extensions. RFC 3546 (Proposed Standard), June 2003.
7. T. Chown. IPv6 Implications for Network Scanning. RFC 5157 (Informational), March 2008.
8. L. Deri. Improving passive packet capture: Beyond device polling. In 4th International System Administration and Network Engineering Conference (SANE), 2004.
9. R. Dingledine. Research problems: Ten ways to discover Tor bridges. http://blog.torproject.org/blog/research-problems-ten-ways-discover-tor-bridges, October 2011.
10. P. Eckersley and J. Burns. An observatory for the SSLiverse. Talk at Defcon 18 (2010). https://www.eff.org/files/DefconSSLiverse.pdf.
11. S. Han, K. Jang, K. Park, and S. Moon. PacketShader: A GPU-accelerated software router. In ACM SIGCOMM, September 2010.
12. J. Heidemann, Y. Pradkin, R. Govindan, C. Papadopoulos, G. Bartlett, and J. Bannister. Census and survey of the visible Internet. In 8th ACM SIGCOMM conference on Internet measurement (IMC), 2008.
13. J. Heidemann, L. Quan, and Y. Pradkin. A preliminary analysis of network outages during hurricane sandy. Technical Report ISI-TR-2008-685b, USC/Information Sciences Institute, November 2012.
14. N. Heninger, Z. Durumeric, E. Wustrow, and J. A. Halderman. Mining your Ps and Qs: Detection of widespread weak keys in network devices. In 21st USENIX Security Symposium, August 2012.
15. R. Holz, L. Braun, N. Kammenhuber, and G. Carle. The SSL landscape: A thorough analysis of the X.509 PKI using active and passive measurements. In 11th ACM SIGCOMM conference on Internet measurement (IMC), pages 427-444, 2011.
16. IANA. IPv4 address space registry. http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml.
17. V. Jacobson, C. Leres, and S. McCanne. libpcap. Lawrence Berkeley National Laboratory, Berkeley, CA. Initial release June 1994.
18. J. Kasten, E. Wustrow, and J. A. Halderman. Cage: Taming certificate authorities by inferring restricted scopes. In 17th International Conference on Financial Cryptography and Data Security (FC), 2013.
19. M Koster. A standard for robot exclusion. http://www.robotstxt.org/orig.html, 1994.
20. A. Langley. Enhancing digital certificate security. Google Online Security Blog, http://googleonlinesecurity.blogspot.com/2013/01/enhancing-digital-certificate-security.html, January 2013.
21. E. Law. Understanding certificate name mismatches. http://blogs.msdn.com/b/ieinternals/archive/2009/12/07/certificate-name-mismatch-warnings-and-server-name-indication.aspx, December 2009.
22. D. Leonard and D. Loguinov. Demystifying service discovery: Implementing an Internet-wide scanner. In 10th ACM SIGCOMM conference on Internet measurement (IMC), pages 109-122, 2010.
23. Gordon Fyodor Lyon. Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning. Insecure, USA, 2009.
24. N. Mathewson and N. Provos. libevent - An event notification library. http://libevent.org.
25. HD Moore. Security flaws in universal plug and play. Unplug. Don't Play, January 2013. http://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf.
26. Netcraft, Ltd. Web server survey. http://news.netcraft.com/archives/2013/05/03/may-2013-web-server-survey.html, May 2013.
27. N. Provos and P. Honeyman. ScanSSH: Scanning the Internet for SSH servers. In 16th USENIX Systems Administration Conference (LISA), 2001.
28. Luigi Rizzo. netmap: A novel framework for fast packet I/O. In 2012 USENIX Annual Technical Conference, 2012.
29. S. Sanfilippo and P. Noordhuis. Redis. http://redis.io.
30. H. Scholz. SIP stack fingerprinting and stack difference attacks. Talk at Blackhat 2006. http://www.blackhat.com/presentations/bh-usa-06/BH-US-06-Scholz.pdf.
31. A. Schulman and N. Spring. Pingin' in the rain. In 11th ACM SIGCOMM conference on Internet measurement (IMC), pages 19-28, 2011.
32. K. Sklower. A tree-based packet routing table for Berkeley Unix. In Winter USENIX Conference, 1991.
33. M. Smith and D. Loguinov. Enabling high-performance Internet-wide measurements on Windows. In 11th International Conference on Passive and Active Measurement (PAM), pages 121-130. Springer, 2010.
34. W. R. Stevens and G. R. Wright. TCP/IP Illustrated: The Implementation, Volume 2. Addison-Wesley, 1995.
35. Tor Project. Tor Bridges. https://www.torproject.org/docs/bridges, 2008.
36. Tor Project. obfsproxy. https://www.torproject.org/projects/obfsproxy.html.en, 2012.
37. J. Viega, M. Messier, and P. Chandra. Network Security with OpenSSL: Cryptography for Secure Communications. O'Reilly, 2002.
38. T. Wilde. Great Firewall Tor probing. https://gist.github.com/twilde/da3c7a9af01d74cd7de7, 2012.