Improving Internet-Wide Scanning with Dynamic Scanning
summary
Presents techniques for reducing the cost and time of large-scale IPv4/IPv6 Internet scanning used by CSIRTs and CERTs to find vulnerable services and abused infrastructure, focusing on dynamic (non-sequential, adaptive) scanning approaches. Describes new open-source tools and methods developed at CIRCL (related to projects like MISP/AIL/D4) that help perform more efficient, recurring scans.
AI-written summary · about
chapters (8)
- 0:00Internet-wide scanning improvements
- 3:35Large-scale scan challenges
- 6:48Traditional techniques and limits
- 10:00Dynamic scanning strategies
- 13:54Optimization with probabilistic models
- 17:13Case studies and feedback
- 20:50Impact and future of dynamic scans
- 23:18Conclusion & Q&A
related talks
26mInternet Scanning - Current State and Lessons Learned
43mAttack or Noise?: Tracking and Evaluating the Impact of Internet-Wide Survey Scanners
41mInternet Spelunking: IPv6 Scanning and Device Fingerprinting
51mHelpful Hackers
41mSysadmins' Introduction to Vulnerability Scanning
58mFIRSTCON21 - June 8 | Stream 3 Part 2 (14:30-15:30 UTC)
58mNothing to Risk but Risk Itself: Expanding Vulnerability Risk with Internet-Scale Data
58mEvasion of High-End IDPS Devices at the IPv6 Era