Zippier ZMap: internet-wide scanning at 10 Gbps
作者： Zakir Durumeric , J. Alex Halderman , David Adrian , Gulshan Singh
DOI:
关键词:
摘要: We introduce optimizations to the ZMap network scanner that achieve a 10-fold increase in maximum scan rate. By parallelizing address generation, introducing an improved blacklisting algorithm, and using zero-copy NIC access, we drive nearly throughput of 10 gigabit Ethernet, almost 15 million probes per second. With these changes, can comprehensively for single TCP port across entire public IPv4 space 4.5 minutes given adequate upstream bandwidth. consider implications such rapid scanning both defenders attackers, briefly discuss range potential applications.
jhalderm.com参考文章(4)
Zakir Durumeric, Michael Bailey, J Alex Halderman, None, An internet-wide view of internet-wide scanning usenix security symposium. pp. 65- 78 ,(2014)
Gordon Fyodor Lyon, Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning ,(2009)
Francesco Fusco, Luca Deri, High speed network traffic analysis with commodity multi-core systems internet measurement conference. pp. 218- 224 ,(2010) , 10.1145/1879141.1879169
Eric Wustrow, Zakir Durumeric, J. Alex Halderman, ZMap: fast internet-wide scanning and its security applications usenix security symposium. pp. 605- 620 ,(2013)