ZMap: Fast Internet-wide Scanning and Its Security Applications

By Zakir Durumeric, Eric Wustrow, J. Alex Halderman. USENIX Security Symposium, 2013

968 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/b56ac2cabecf5946affa861c042f1cf703e8fde7

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

No Encore for Encore? Ethical questions for web-based censorship measurement (2015, methodology): “The ZMap research tool allows performing fast scans on an Internet-wide scale [14].”
Towards Automated Dynamic Analysis for Linux-based Embedded Firmware (2016, methodology): “Likewise, using the ZMap [13] network scanner, Heninger et al. [14] showed that embedded devices can also suffer from entropy problems.”
A Large-Scale Analysis of the Security of Embedded Firmwares (2014, methodology): “ZMap [37] is an efficient and fast network scanner, that allows to scan the complete Internet IPv4 address space in less than one hour.”
Analysis of the HTTPS certificate ecosystem (2013, methodology): “We discuss the ethical implications of performing active scanning and provide more details about the steps we take to reduce scan impact in our previous work [13].”
Eclipse Attacks on Bitcoin's Peer-to-Peer Network (2015, background): “A custom TCP stack (see e.g., zmap [35]) requires minimal CPU and memory, and is typically bottlenecked only by bandwidth, and the bandwidth cost of our attack is minimal: Attack connections.”
A Search Engine Backed by Internet-Wide Scanning (2015, methodology): “In the ﬁrst step, we perform host discovery scans using ZMap [20], complete application handshakes with responsive hosts us-ing pluggable application scanners, and derive structured ﬁelds (e.g., certiﬁcate subject or TLS cipher suite) from the handshake.”
Amplification Hell: Revisiting Network Protocols for DDoS Abuse (2014, methodology): “For scanning, we assume that a /0 scan for a UDP-based protocol finishes in two hours [8] and calculate the time to find a subset of amplifiers accordingly.”
Guided differential testing of certificate validation in SSL/TLS implementations (2015, methodology): “These certiﬁcates were gathered using ZMap [25] by scanning the Internet and attempting SSL connections to hosts listening on port 443.”
Elliptic Curve Cryptography in Practice (2014, methodology): “ZMap [22], a fast Internet-wide port scanner, to scan for hosts with port 22 open, and attempted an SSH protocol handshake with the addresses accepting connections on port 22.”
Using Frankencerts for Automated Adversarial Testing of Certificate Validation in SSL/TLS Implementations (2014, methodology): “We used ZMap [26] to scan the Internet and attempt an SSL connection to every host listening on port 443.”
The Matter of Heartbleed (2014, methodology): “We tested for the Heartbleed bug by modifying ZMap [30] to send Heartbeat requests with no payload nor padding, and the length ﬁeld set to zero.”