Repository logo
 

Scanning the internet for liveness

Accepted version
Peer-reviewed

Type

Article

Change log

Authors

Bano, S 
Richter, P 
Javed, M 
Sundaresan, S 
Durumeric, Z 

Abstract

jats:pInternet-wide scanning depends on a notion of liveness: does a target IP address respond to a probe packet? However, the interpretation of such responses, or lack of them, is nuanced and depends on multiple factors, including: how we probed, how different protocols in the network stack interact, the presence of filtering policies near the target, and temporal churn in IP responsiveness. Although often neglected, these factors can significantly affect the results of active measurement studies. We develop a taxonomy of liveness which we employ to develop a method to perform concurrent IPv4 scans using ICMP, five TCP-based, and two UDP-based protocols, comprehensively capturing all responses to our probes, including negative and cross-layer responses. Leveraging our methodology, we present a systematic analysis of liveness and how it manifests in active scanning campaigns, yielding practical insights and methodological improvements for the design and the execution of active Internet measurement studies.</jats:p>

Description

Keywords

Active Measurement, Scanning, Cross-protocol, Census

Journal Title

Computer Communication Review

Conference Name

Journal ISSN

0146-4833
1943-5819

Volume Title

48

Publisher

Association for Computing Machinery (ACM)
Sponsorship
Engineering and Physical Sciences Research Council (EP/K031724/2)
The Royal Society (uf110392)
Engineering and Physical Sciences Research Council (EP/L003406/1)