返回
Internet Scan Source Identification: A Survey
DOI:10.1109/MNET.2025.3574126.png)
摘要
En 中文
Recently, Internet scanning activities have increased significantly, while the purposes and impacts of these scans have grown increasingly complex. Organizations dedicated to enhancing Internet security, as well as malicious ones, both conduct frequent and systematic scans across the entire IPv4 address space and partial IPv6 address space. In this context, the scan source identification, on which scan intelligence relies, is crucial as it supports in-depth analysis of the scanning behavior of organizations and helps uncover the real identity and size of potential attack organizations. In this article, we provide an extensive survey on Internet scan source identification. We summarize the common methodology and propose a taxonomy for classification. Based on this taxonomy, we outline the current state of Internet scan source identification research. Furthermore, we identify existing challenges and suggest future directions in this field.
Keyword:
Monitoring
Dark Web
IP networks
Internet
Telescopes
Surveys
Firewalls (computing)
Cloud computing
Servers
期刊
IF:
6.3
论文数:
2.7K
被引数:
1.1W
机构
引用论文
H. Griffioen, G. Koursiounis, G. Smaragdakis, and C. Doerr, “Have you SYN me? Characterizing Ten Years of Internet Scanning,” ser. IMC ’24: Proceedings of the 2024 ACM on Internet Measurement Conference. 1em plus 0.5em minus 0.4emNew York, NY, USA: Association for Computing Machinery, 2024, p. 149–164. doi: https://doi.org/10.1145/3646547.3688409[10.1145/3646547.3688409] .H. Griffioen, G. Koursiounis, G. Smaragdakis 和 C. Doerr, “Have you SYN me? Characterizing Ten Years of Internet Scanning,” ser. IMC ’24: Proceedings of the 2024 ACM on Internet Measurement Conference. New York, NY, USA: Association for Computing Machinery, 2024, p. 149–164. doi: https://doi.org/10.1145/3646547.3688409[10.1145/3646547.3688409].
Adversarial Machine Learning for Network Intrusion Detection Systems: A Comprehensive Survey网络入侵检测系统的对抗性机器学习: 综合综述
P. Richter, O. Gasser, and A. Berger, “Illuminating large-scale IPv6 scanning in the internet,” in Proceedings of the 22nd ACM Internet Measurement Conference (IMC ’22). Nice, France: ACM, 2022, pp. 410–418. doi: https://doi.org/10.1145/3517745.3561452[10.1145/3517745.3561452] .P. Richter, O. Gasser, and A. Berger, “Illuminating large-scale IPv6 scanning in the internet,” in Proceedings of the 22nd ACM Internet Measurement Conference (IMC ’22). Nice, France: ACM, 2022, pp. 410–418. doi: https://doi.org/10.1145/3517745.3561452[10.1145/3517745.3561452].

