Name
Abstract | ||
|---|---|---|
Internet-wide network scanning has numerous security applications, including exposing new vulnerabilities and tracking the adoption of defensive mechanisms, but probing the entire public address space with existing tools is both difficult and slow. We introduce ZMap, a modular, open-source network scanner specifically architected to perform Internet-wide scans and capable of surveying the entire IPv4 address space in under 45 minutes from user space on a single machine, approaching the theoretical maximum speed of gigabit Ethernet. We present the scanner architecture, experimentally characterize its performance and accuracy, and explore the security implications of high speed Internet-scale network surveys, both offensive and defensive. We also discuss best practices for good Internet citizenship when performing Internet-wide surveys, informed by our own experiences conducting a long-term research survey over the past year. |
Year | Venue | Keywords |
|---|---|---|
2013 | USENIX Security | numerous security application,entire public address space,defensive mechanism,internet-wide network,user space,internet-wide scan,ipv4 address space,high speed internet-scale network,internet-wide survey,open-source network scanner |
Field | DocType | Citations |
Architecture,Computer science,Computer security,Gigabit Ethernet,Modular design,User space,Public address system,Vulnerability,IPv4 address exhaustion,The Internet | Conference | 152 |
PageRank | References | Authors |
8.81 | 14 | 3 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Zakir Durumeric | 1 | 935 | 48.86 |
| Eric Wustrow | 2 | 564 | 37.93 |
| J. Alex Halderman | 3 | 2301 | 149.67 |