DScope - A Cloud-Native Internet Telescope

Explore a 15-minute conference talk from USENIX Security '23 introducing DScope, a cloud-native Internet telescope designed to address challenges faced by traditional monitoring systems. Learn about the scalable and interactive architecture of DScope, including its cloud-based collectors and data processing pipeline. Discover how this innovative approach captures and analyzes traffic targeting cloud systems, revealing significant differences in quantity and behavior compared to traditional telescopes. Gain insights into DScope's adaptive methodology, which achieves optimal scanner detection in under 8 minutes of observation, demonstrating impressive price performance. Understand how cloud-based telescopes like DScope provide a broader and more comprehensive perspective on malicious, unwanted, and unexpected Internet behavior in the era of cloud infrastructure and IPv4 address scarcity.