Scanning the entire IPv4 internet in minutes
Summary
J. Alex Halderman presents ZMap, which scans the public IPv4 address space efficiently and thereby makes vulnerability, deployment and remediation measurable across the internet. Tools change research when measurements that used to take months become possible in minutes. Internet-wide visibility turns local misconfigurations into quantifiable global patterns.
Ideas
- ZMap optimises stateless sending for very large address spaces.
- Responses are captured separately and later matched with the probes that were sent.
- Repeated measurements show the rollout and removal of vulnerable services.
Insights
- Tools change research when measurements that used to take months become possible in minutes.
- Internet-wide visibility turns local misconfigurations into quantifiable global patterns.
Recommendations
- Define purpose, exclusions and contact information before large-scale measurements.
- Limit rate and protocol so that other people’s systems are burdened as little as possible.
References
Links to the original source and the Web Archive open in a new tab.