A discrete-log method recovers ZMap's internal multiplicative state from 20 observed probes and identifies 28.5% of IP-ID-labeled ZMap scans with at least 20 packets on telescope and backbone traffic.
A brief history of scanning
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2019 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Identifying and characterizing ZMap scans: a cryptanalytic approach
A discrete-log method recovers ZMap's internal multiplicative state from 20 observed probes and identifies 28.5% of IP-ID-labeled ZMap scans with at least 20 packets on telescope and backbone traffic.