Back to Search
Start Over
On the origin of scanning: the impact of location on Internet-wide scans
- Source :
- IMC '20: Proceedings of the ACM Internet Measurement Conference, 662-679, STARTPAGE=662;ENDPAGE=679;TITLE=IMC '20, Internet Measurement Conference
- Publication Year :
- 2020
- Publisher :
- ACM SIGCOMM, 2020.
-
Abstract
- Fast IPv4 scanning has enabled researchers to answer a wealth of security and networking questions. Yet, despite widespread use, there has been little validation of the methodology's accuracy, including whether a single scan provides sufficient coverage. In this paper, we analyze how scan origin affects the results of Internet-wide scans by completing three HTTP, HTTPS, and SSH scans from seven geographically and topologically diverse networks. We find that individual origins miss an average 1.6-8.4% of HTTP, 1.5-4.6% of HTTPS, and 8.3-18.2% of SSH hosts. We analyze why origins see different hosts, and show how permanent and temporary blocking, packet loss, geographic biases, and transient outages affect scan results. We discuss the implications for scanning and provide recommendations for future studies.
- Subjects :
- Future studies
Cybersecurity
Computer science
business.industry
computer.internet_protocol
22/3 OA procedure
020206 networking & telecommunications
02 engineering and technology
Blocking (statistics)
IPv4
Packet loss
020204 information systems
0202 electrical engineering, electronic engineering, information engineering
Transient (computer programming)
The Internet
Single scan
business
computer
Computer network
Subjects
Details
- Language :
- English
- Database :
- OpenAIRE
- Journal :
- IMC '20: Proceedings of the ACM Internet Measurement Conference, 662-679, STARTPAGE=662;ENDPAGE=679;TITLE=IMC '20, Internet Measurement Conference
- Accession number :
- edsair.doi.dedup.....28773a0903958b74346e979e5139ad5e