A brief history of scanning

Incessant scanning of hosts by attackers looking for vulnerable servers has become a fact of Internet life. In this paper we present an initial study of the scanning activity observed at one site over the past 12.5 years. We study the onset of scanning in the late 1990s and its evolution in terms of characteristics such as the number of scanners, targets and probing patterns. While our study is preliminary in many ways, it provides the first longitudinal examination of a now ubiquitous Internet phenomenon. Categories and Subject Descriptors C.2.0 [Computer-Communication Networks]: General; C.2.3 [Computer-Communication Networks]: Network Operations; C.2.6 [Computer-Communication Networks]: Internetworking General Terms Measurement,Security Keywords Scanning,Longitudinal,Malicious Activity

• Type: Conference
• Year: 2007
• Where: IMC
• Authors: Mark Allman, Vern Paxson, Jeff Terrell
• Keywords: Computer-Communication Networks, IMC 2007, Incessant Scanning, Internet Technology, Past 12.5 Years