{"created":"2022-06-09T02:16:08.691642+00:00","id":2000353,"links":{},"metadata":{"_buckets":{"deposit":"fe1ac2b5-86a0-4271-bba3-eb6ff42261d4"},"_deposit":{"created_by":18,"id":"2000353","owner":"18","owners":[18],"owners_ext":{"displayname":"NII","username":"niirepo"},"pid":{"revision_id":0,"type":"depid","value":"2000353"},"status":"published"},"_oai":{"id":"oai:repository.nii.ac.jp:02000353","sets":["136"]},"author_link":[],"control_number":"2000353","item_5_biblio_info_30":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicIssueDates":{"bibliographicIssueDate":"2016-12-22","bibliographicIssueDateType":"Issued"},"bibliographicPageStart":"none","bibliographic_titles":[{"bibliographic_title":"NIIテクニカル・レポート","bibliographic_titleLang":"ja"},{"bibliographic_title":"NII Technical Report","bibliographic_titleLang":"en"}]}]},"item_5_description_28":{"attribute_name":"抄録","attribute_value_mlt":[{"subitem_description":"A great deal of effort has been dedicated to the study of network scanning. Nonetheless, previous studies focused on simple char- acteristics such as the number of scanning IPs (also called scanners) or targets, but usually neglected scanner behavior. We analyze 15 years of backbone traffic and propose a method for profiling scanning IPs. Our analysis first details evolution of targeted services, mass-scanning tool usage and scanning pattern. Then, we propose a new method to classify scanning IPs’ spatial and temporal structure into three profiles that re- veal vastly different intent. In particular, we find that 33% of scanners repeatedly target the same set of hosts. If unsolicited, this behavior pro- vides an early warning to administrators regarding the malicious intent of scanners. Finally, we study publicly documented scanners’ activities and show that security research-related scanning IPs behave differently than non-documented scanners. We also show that only 39% of scanning entities follow online documentation best practices.","subitem_description_language":"en","subitem_description_type":"Abstract"}]},"item_5_identifier_registration":{"attribute_name":"ID登録","attribute_value_mlt":[{"subitem_identifier_reg_text":"10.20736/0002000353","subitem_identifier_reg_type":"JaLC"}]},"item_5_publisher_31":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"国立情報学研究所","subitem_publisher_language":"ja"}]},"item_5_source_id_32":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"1346-5597","subitem_source_identifier_type":"ISSN"}]},"item_creator":{"attribute_name":"著者","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Mazel, Johan","creatorNameLang":"en"}]},{"creatorNames":[{"creatorName":"Fontugne, Romain","creatorNameLang":"en"}]},{"creatorNames":[{"creatorName":"福田, 健介","creatorNameLang":"ja"},{"creatorName":"Fukuda, Kensuke","creatorNameLang":"en"}]}]},"item_files":{"attribute_name":"ファイル情報","attribute_type":"file","attribute_value_mlt":[{"accessrole":"open_date","date":[{"dateType":"Available","dateValue":"2022-06-09"}],"displaytype":"detail","filename":"16-008E.pdf","filesize":[{"value":"960 KB"}],"format":"application/pdf","licensetype":"license_note","mimetype":"application/pdf","url":{"label":"NII Technical Report (NII-2016-008E)：Profiling Internet Scanners: Spatial and Temporal Structures","url":"https://repository.nii.ac.jp/record/2000353/files/16-008E.pdf"},"version_id":"354eb4ed-0240-415f-b504-9c0779df9fb0"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"テクニカルレポート","subitem_subject_language":"ja","subitem_subject_scheme":"Other"},{"subitem_subject":"Technical Report","subitem_subject_language":"en","subitem_subject_scheme":"Other"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"eng"}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourcetype":"departmental bulletin paper","resourceuri":"http://purl.org/coar/resource_type/c_6501"}]},"item_title":"NII Technical Report (NII-2016-008E)：Profiling Internet Scanners: Spatial and Temporal Structures","item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"NII Technical Report (NII-2016-008E)：Profiling Internet Scanners: Spatial and Temporal Structures","subitem_title_language":"en"}]},"item_type_id":"5","owner":"18","path":["136"],"pubdate":{"attribute_name":"PubDate","attribute_value":"2022-06-09"},"publish_date":"2022-06-09","publish_status":"0","recid":"2000353","relation_version_is_last":true,"title":["NII Technical Report (NII-2016-008E)：Profiling Internet Scanners: Spatial and Temporal Structures"],"weko_creator_id":"18","weko_shared_id":-1},"updated":"2023-01-11T05:43:28.586439+00:00"}