首页/论文/1808.03322

arXiv 1808.033222018-08cs.CRcs.RO

Scanning the Internet for ROS: A View of Security in Robotics Research

Brown University（布朗大学）

Nicholas DeMarinis, Stefanie Tellex, Vasileios Kemerlis, George Konidaris, Rodrigo Fonseca

备注：: 10 pages

阅读 PDF ↗

arXiv 页面 ↗HTML 原文 ↗

英文摘要相关论文

英文摘要：

Because robots can directly perceive and affect the physical world, security issues take on particular importance. In this paper, we describe the results of our work on scanning the entire IPv4 address space of the Internet for instances of the Robot Operating System (ROS), a widely used robotics platform for research. Our results identified that a number of hosts supporting ROS are exposed to the public Internet, thereby allowing anyone to access robotic sensors and actuators. As a proof of concept, and with consent, we were able to read image sensor information and move the robot of a research group in a US university. This paper gives an overview of our findings, including the geographic distribution of publicly-accessible platforms, the sorts of sensor and actuator data that is available, as well as the different kinds of robots and sensors that our scan uncovered. Additionally, we offer recommendations on best practices to mitigate these security issues in the future.

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

阅读原文

阅读 PDF ↗

arXiv 页面 ↗HTML 原文 ↗

本文内容

英文摘要相关论文

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

继续探索

相关论文

基于暗网的网络蠕虫时间特征推断

Darknet-Based Inference of Internet Worm Temporal Characteristics

网络蠕虫攻击对网络安全和管理构成了重大威胁。在这项工作中，我们硬币的长期互联网蠕虫断层扫描推断的特点，互联网蠕虫的观察暗网或网络望远镜，监视一个可路由的，但未使用的IP地址空间。在网络蠕虫断层扫描的框架下，我们试图推断网络蠕虫的时间行为，即，主机感染时间和蠕虫感染顺序，从而精确定位零号患者或最初感染的主机。具体来说，我们介绍统计估计技术，并提出矩，最大似然法和线性回归估计方法。我们分析和经验表明，我们提出的估计可以更好地推断蠕虫的时间特性比一个天真的估计，已在以前的工作。我们还表明，我们的估计可以应用到蠕虫使用不同的扫描策略，如随机扫描和本地化扫描。

2010-07-13cs.CR

SMap：针对IP欺骗的互联网范围扫描

SMap: Internet-wide Scanning for Spoofing

本研究提出首款互联网范围入站过滤扫描器SMap，利用通用标准协议评估网络可欺骗性，测得69.8%的自治系统未过滤伪造数据包，发现4.6万余个新可欺骗AS，并公开工具与数据以支撑相关研究与持续监测。

2024-04-16cs.CR

Identifying and characterizing ZMap scans: a cryptanalytic approach

Network scanning tools play a major role in Internet security. They are used by both network security researchers and malicious actors to identify vulnerable machines exposed on the Internet. ZMap is one of the most common probing tools for high-speed Internet-wide scanning. We present novel identification methods based on the IPv4 iteration process of ZMap. These methods can be used to identify ZMap scans with a small number of addresses extracted from the scan. We conduct an experimental evaluation of these detection methods on synthetic, network telescope, and backbone traffic. We manage to…

2019-08-13cs.CR

基于主动网络望远镜的React2Shell攻击互联网级测量

Internet-Scale Measurement of React2Shell Exploitation Using an Active Network Telescope

Big Data Research and Supercomputing Division, CSIR Fourth Paradigm Institute (CSIR-4PI), Bengaluru, India（印度班加罗尔，CSIR第四范式研究所（CSIR-4PI）大数据研究与超级计算部）

本文首次利用主动网络望远镜对React2Shell攻击进行互联网级测量，分析了攻击流量的时间演变、地理分布及后端基础设施，揭示了攻击模式与自动化扫描活动的一致性。

2026-03-12cs.CRcs.NI

LZR: Identifying Unexpected Internet Services

Internet-wide scanning is a commonly used research technique that has helped uncover real-world attacks, find cryptographic weaknesses, and understand both operator and miscreant behavior. Studies that employ scanning have largely assumed that services are hosted on their IANA-assigned ports, overlooking the study of services on unusual ports. In this work, we investigate where Internet services are deployed in practice and evaluate the security posture of services on unexpected ports. We show protocol deployment is more diffuse than previously believed and that protocols run on many additiona…

2023-01-12cs.CRcs.NI

清理NTP池：检测和缓解源自NTP的IPv6扫描

Cleaning the NTP Pool: Detecting and Mitigating NTP-Sourced IPv6 Scanning

Johns Hopkins University（约翰斯·霍普金斯大学）；San Diego State University（圣地亚哥州立大学）

研究针对低功率实体利用NTP池获取IPv6客户端地址进行恶意活动的问题，开发方法识别此类行为及相关实体，通过查询NTP池服务器并监测后续活动，找出不良服务器，推动NTP池运营商和相关公司改进，保障网络安全。

2026-09-15cs.CRcs.NI

更多相关论文收起更多论文

CIS基准扫描结果的可视化

Visualisation for the CIS benchmark scanning results

GraphSecure通过可视化技术帮助用户分析和展示AWS账户的安全扫描结果，符合CIS基准并提供账户状态预警。

2025-12-12cs.CRcs.SE

SHARKS: Smart Hacking Approaches for RisK Scanning in Internet-of-Things and Cyber-Physical Systems based on Machine Learning

Princeton University（普林斯顿大学）；Technology Innovation Institute（技术创新研究所）

Cyber-physical systems (CPS) and Internet-of-Things (IoT) devices are increasingly being deployed across multiple functionalities, ranging from healthcare devices and wearables to critical infrastructures, e.g., nuclear power plants, autonomous vehicles, smart cities, and smart homes. These devices are inherently not secure across their comprehensive software, hardware, and network stacks, thus presenting a large attack surface that can be exploited by hackers. In this article, we present an innovative technique for detecting unknown system vulnerabilities, managing these vulnerabilities, and …

2022-10-19cs.AIcs.CRcs.LG

XMap：快速的互联网-wide IPv4 和 IPv6 网络扫描器

XMap: Fast Internet-wide IPv4 and IPv6 Network Scanner

Nankai University（南开大学）

XMap 是一款用于快速扫描互联网-wide IPv4 和 IPv6 网络的开源工具，已广泛应用于学术、工业和政府领域，并对 RFC 文档和漏洞发现产生了重要影响。

2026-02-10cs.CRcs.NI

Network Scanning and Mapping for IIoT Edge Node Device Security

The amount of connected devices in the industrial environment is growing continuously, due to the ongoing demands of new features like predictive maintenance. New business models require more data, collected by IIoT edge node sensors based on inexpensive and low performance Microcontroller Units (MCUs). A negative side effect of this rise of interconnections is the increased attack surface, enabled by a larger network with more network services. Attaching badly documented and cheap devices to industrial networks often without permission of the administrator even further increases the security …

2019-10-16cs.CR

Shepherd: Enabling Automatic and Large-Scale Login Security Studies

More and more parts of the internet are hidden behind a login field. This poses a barrier to any study predicated on scanning the internet. Moreover, the authentication process itself may be a weak point. To study authentication weaknesses at scale, automated login capabilities are needed. In this work we introduce Shepherd, a scanning framework to automatically log in on websites. The Shepherd framework enables us to perform large-scale scans of post-login aspects of websites. Shepherd scans a website for login fields, attempts to submit credentials and evaluates whether login was successful.…

2018-08-02cs.CR

结合威胁情报与物联网扫描以预测网络攻击

Combining Threat Intelligence with IoT Scanning to Predict Cyber Attack

Researcher Senior Member, IEEE（IEEE高级研究员）

本文提出一个预测性威胁情报框架，通过系统收集、分析和可视化暗网数据，识别恶意网站并将其与物联网漏洞关联，以增强网络攻击预测建模和政策制定。

2025-06-03cs.AIcs.CRcs.CY

Snail Mail Beats Email Any Day: On Effective Operator Security Notifications in the Internet

In the era of large-scale internet scanning, misconfigured websites are a frequent cause of data leaks and security incidents. Previous research has investigated sending automated email notifications to operators of insecure or compromised websites, but has often met with limited success due to challenges in address data quality, spam filtering, and operator distrust and disinterest. While several studies have investigated the design and phrasing of notification emails in a bid to increase their effectiveness, the use of other contact channels has remained almost completely unexplored due to t…

2021-06-15cs.CRcs.CY

IPv4标识符选择的正确性、安全性和性能的分类与比较分析

A Taxonomy and Comparative Analysis of IPv4 Identifier Selection Correctness, Security, and Performance

Arizona State University（亚利桑那州立大学）；Eastern Washington University（东华盛顿大学）；Bowdoin College（鲍登学院）

本文对25年来基于IPv4标识符（IPID）的利用和选择方法进行分类，通过数学分析和实证评估，揭示了最佳实践建议和当前操作系统实现的不足。

2025-11-07cs.CRcs.NI

网络感知恶意软件攻击的信息理论观点

An Information-Theoretical View of Network-Aware Malware Attacks

本工作研究三个方面：（a）作为非均匀可访问主机分布的网络脆弱性，（b）威胁，即，利用这种漏洞的智能恶意软件，以及（c）防御，即，应对威胁的挑战。我们首先研究了五个大型数据集，并观察到一致的集群可扩展主机分布。然后，我们提出了一个新的度量，被称为非均匀性因素，它量化的不均匀性的可分配主机分布。该度量本质上是Renyi信息熵，并且比Shannon熵更好地表征分布的不均匀性。其次，从信息论的角度分析了网络感知型恶意软件的传播速度。特别是，我们绘制Renyi熵和随机流行的恶意软件扫描算法之间的关系。我们发现，恶意软件扫描方法的感染率的特征在于Renyi熵，涉及到的信息位在一个非均匀的可扩展主机分布提取的随机扫描算法。与此同时，我们表明，一个代表性的网络感知恶意软件可以增加传播速度的准确或接近的非均匀性因素相比，随机扫描恶意软件在早期阶段的恶意软件传播。这量化了当恶意软件利用不均匀的可访问主机分布作为网络范围的漏洞时，互联网在早期阶段被感染的速度有多快。此外，我们还分析了防御策略对网络感知恶意软件传播的有效性。我们的研究结果表明，抵制网络感知的恶意软件是一个重大的挑战，包括基于主机的防御和IPv6的策略。

2008-09-08cs.CRcs.ITcs.NI

Uncovering Fingerprinting Networks. An Analysis of In-Browser Tracking using a Behavior-based Approach

Throughout recent years, the importance of internet-privacy has continuously risen. [...] Browser fingerprinting is a technique that does not require cookies or persistent identifiers. It derives a sufficiently unique identifier from the various browser or device properties. Academic work has covered offensive and defensive fingerprinting methods for almost a decade, observing a rise in popularity. This thesis explores the current state of browser fingerprinting on the internet. For that, we implement FPNET - a scalable & reliable tool based on FPMON, to identify fingerprinting scripts on larg…

2022-08-15cs.CRcs.CY

Gotham Dataset 2025：一个用于入侵检测与安全研究的可复现大规模物联网网络数据集

Gotham Dataset 2025: A Reproducible Large-Scale IoT Network Dataset for Intrusion Detection and Security Research

Cardiff University（卡迪夫大学）；Toshiba Europe Limited（东芝欧洲有限公司）

本文基于Gotham仿真测试平台构建了包含78个物联网设备、多协议与多类攻击的大规模网络流量数据集，并提供PCAP与CSV标注数据，以支持大规模物联网环境下的入侵检测研究。

2025-02-05cs.AIcs.CR