Explore optimizations to the ZMap network scanner that achieve a 10-fold increase in maximum scan rate in this 20-minute conference talk from USENIX WOOT '14. Learn about parallelizing address generation, an improved blacklisting algorithm, and zero-copy NIC access that drive ZMap to nearly the maximum throughput of 10 gigabit Ethernet, enabling comprehensive scanning of a single TCP port across the entire public IPv4 address space in just 4.5 minutes. Discover the implications of such rapid scanning for both defenders and attackers, and gain insights into potential applications of this enhanced scanning capability.
Overview
Syllabus
WOOT '14 - Zippier ZMap: Internet-Wide Scanning at 10 Gbps
Taught by
USENIX