Presented at
Still Hacking Anyway (SHA2017),
Aug. 7, 2017, 9:25 p.m.
(60 minutes).
This workshop will present past, present and possible future scanning strategies for the IPv4 address space (and beyond), BGP monitoring-, keeping track of AS/IP transitions, data correlation, error detection and globally distributed scanning. The participants will learn about different scanning methodologies (past & presently used), ongoing efforts by researchers, NGOs and RIRs. Next we'll introduce them to the concepts of running their own internet-wide scans and give them the possibility to try out their ideas on-site.
ATTENTION: The workshop doesn't require in-depth knowledge, but you should be familiar with Bash or Python scripting, Linux and TCP/IP basics.
SCANS DURING SHA2017: from day 1 until and after the workshop we will run IPv4-wide scans (among others) live on the internet via the SHA2017 uplink. You may participate on-site or remotely by submitting scans/ideas to `shascan@azet.org` - more details and collaboration via this document: https://gist.github.com/azet/54862407b7af1c2813e590ead83f7553
The presenter has been involved in internet-wide scanning for the past ~3 years and has co-authored several publications as a result of their scanning activity. But it's time to merge scanning efforts and take a step back to critically analyze our current scanning strategies, their longevity and reflect on the data - as well as ethical and privacy related questions - they yield.
Presenters:
-
Aaron Zauner / azet
as Aaron Zauner (azet)
10+ years of engineering. Has seen the fallacies of distributed computing. Still enjoys working and researching in the industry. Loves tuning, scaling and securing of distributed systems - building on and contributing to great Free & Open Source Software. Above all: getting to meet brilliant people, exchange ideas and work on exciting projects all the time!
I am self-employed and primarily do engineering work, consulting and research on IT Infrastructure Architecture, Operations & Development, Applied Cryptography, High Performance Computing and Information Security.
I've held talks on DevOps, HPC and Security related topics at various venues - from local meetups to internationally recognized conferences.
Publications: https://scholar.google.com/citations?user=pMyYN5wAAAAJ
Links:
Similar Presentations: