| Presentation | 2020-03-02 Proposing Criteria for Detecting Internet-Wide Scanners for Darknet Monitoring Yukiko Endo, Yoshiki Mori, Jumpei Shimamura, Masaki Kubo, |
|---|---|
| PDF Download Page |  PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | The NICTER project has been observing the darknet (observing packets arriving at unused IP addresses) for over 10 years. In 2018, we first noticed a remarkable increase of packets sent from the "internet-wide scanners" (some are well known threat intelligence providers or research institutions and the others are unknown bodies). That trend didn't only continue in 2019 but those packets from the internet-wide scanners amounted to more than half of the total packets we observed. In this paper, we will show the detailed status of internet-wide scanners along with statistical data and propose a criteria that will differentiate those internet-wide scanners and study its validity. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | darknet / network scan / internet-wide scanners / IoT malware |
| Paper # | ICSS2019-80 |
| Date of Issue | 2020-02-24 (ICSS) |
| Conference Information | |
| Committee | ICSS / IPSJ-SPT |
|---|---|
| Conference Date | 2020/3/2(2days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | Okinawa-Ken-Seinen-Kaikan |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | Security, Trust, etc. |
| Chair | Hiroki Takakura(NII) |
| Vice Chair | Katsunari Yoshioka(Yokohama National Univ.) / Kazunori Kamiya(NTT) |
| Secretary | Katsunari Yoshioka(NICT) / Kazunori Kamiya(KDDI labs.) |
| Assistant | Keisuke Kito(Mitsubishi Electric) / Toshihiro Yamauchi(Okayama Univ.) |
| Paper Information | |
| Registration To | Technical Committee on Information and Communication System Security / Special Interest Group on Security Psychology and Trust |
|---|---|
| Language | JPN |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | Proposing Criteria for Detecting Internet-Wide Scanners for Darknet Monitoring |
| Sub Title (in English) | |
| Keyword(1) | darknet |
| Keyword(2) | network scan |
| Keyword(3) | internet-wide scanners |
| Keyword(4) | IoT malware |
| 1st Author's Name | Yukiko Endo |
| 1st Author's Affiliation | National Institute of Information and Communications Technology(NICT) |
| 2nd Author's Name | Yoshiki Mori |
| 2nd Author's Affiliation | National Institute of Information and Communications Technology(NICT) |
| 3rd Author's Name | Jumpei Shimamura |
| 3rd Author's Affiliation | Clwit Inc.(Clwit) |
| 4th Author's Name | Masaki Kubo |
| 4th Author's Affiliation | National Institute of Information and Communications Technology(NICT) |
| Date | 2020-03-02 |
| Paper # | ICSS2019-80 |
| Volume (vol) | vol.119 |
| Number (no) | ICSS-437 |
| Page | pp.pp.73-78(ICSS), |
| #Pages | 6 |
| Date of Issue | 2020-02-24 (ICSS) |