SD-WAN互联网普查
SD-WAN Internet Census
摘要：
软件定义广域网（SD-WAN或SDWAN）的概念是现代计算机网络的核心，特别是在企业网中。根据定义，这些系统形成网络边界，并连接互联网、WAN、扩展和分支机构，这使得它们从网络安全的角度来看至关重要。本文的目标是使用常见的威胁情报方法为SD-WAN系统提供被动和主动指纹识别的结果。我们使用知名的Shodan和Censys搜索引擎以及自定义开发的自动化工具探索基于互联网和基于云的公开可用SD-WAN系统，并表明大多数SD-WAN系统都存在与过时软件和不安全配置相关的已知漏洞。
英文摘要：
The concept of software defined wide area network (SD-WAN or SDWAN) is central to modern computer networking, particularly in enterprise networks. By definition, these systems form network perimeter and connect Internet, WAN, extranet, and branches that makes them crucial from cybersecurity point of view. The goal of this paper is to provide the results of passive and active fingerprinting for SD-WAN systems using a common threat intelligence approach. We explore Internet-based and cloud-based publicly available SD-WAN systems using well-known Shodan and Censys search engines and custom developed automation tools and show that most of the SD-WAN systems have known vulnerabilities related to outdated software and insecure configuration.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
