Demystifying Internet-Wide Service Discovery Academic Article

abstract

• This paper develops a high-performance, Internet-wide service discovery tool, which we call IRLscanner, whose main design objectives have been to maximize politeness at remote networks, allow scanning rates that achieve coverage of the Internet in minutes/hours (rather than weeks/months), and significantly reduce administrator complaints. Using IRLscanner and 24-h scans, we perform 21 Internet-wide experiments using six different protocols (i.e., DNS, HTTP, SMTP, EPMAP, ICMP, and UDP ECHO), demonstrate the usefulness of ACK scans in detecting live hosts behind stateless firewalls, and undertake the first Internet-wide OS fingerprinting. In addition, we analyze the feedback generated (e.g., complaints, IDS alarms) and suggest novel approaches for reducing the amount of blowback during similar studies, which should enable researchers to collect valuable experimental data in the future with significantly fewer hurdles. 2012 IEEE.

authors

• Loguinov, Dmitri

published proceedings

• IEEE-ACM TRANSACTIONS ON NETWORKING

author list (cited authors)

• Leonard, D., & Loguinov, D.

citation count

• 7

complete list of authors

• Leonard, Derek||Loguinov, Dmitri

publication date

• December 2013

publisher

• Institute of Electrical and Electronics Engineers (IEEE)  Publisher

published in

• IEEE ACM Transactions on Networking  Journal

keywords

• Horizontal Scanning
• Internet Measurement

Digital Object Identifier (DOI)

• 10.1109/TNET.2012.2231434

start page

• 1760

end page

• 1773

volume

• 21

issue

• 6

URL

• http%3A%2F%2Fdx.doi.org%2F10.1109%2Ftnet.2012.2231434