arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2012.10652cs.NI
收藏

基于IPv6的住宅宽带网络中的网络侦察

Network Reconnaissance in IPv6-based Residential Broadband Networks

Nora Bruns

AI总结:

本论文针对IPv6住宅宽带网络侦察难题,提出适应方法,包括可视化、NTP Pool hitlist来源、扫描技术及德国三大网络案例研究,以发现客户端主机。

摘要:

网络扫描一直是收集整个互联网信息的广泛使用的技术。从IPv4向IPv6的过渡使得传统的网络扫描变得不那么有用。越来越多的主机要么仅支持IPv6,要么由于使用NAT而无法通过IPv4公开寻址,这促使了对基于IPv6的互联网的网络扫描技术的需求。所有当前的IPv6网络扫描方法都使用hitlists(待扫描的IPv6地址列表)。已经提出了多种编译hitlists的方法,但它们强烈偏向于服务器主机,并且无法大量发现客户端主机——智能手机、平板电脑、个人电脑、'智能家居'设备等——的地址。客户端主机是连接到互联网的大多数设备。此外,当连接到住宅宽带连接时,它们可以以可观的速度交换数据,使其成为僵尸网络的有吸引力的目标。扫描住宅宽带网络具有挑战性,因为活跃地址的变化频率远高于服务器主机的地址。\n 本硕士论文旨在将先前的IPv6网络扫描技术适应于住宅宽带网络。为此,做出了以下贡献:\n 描述和评估一种IPv6地址空间可视化方法,\n 引入NTP Pool Project作为公共和被动IPv6 hitlist来源,主要检测客户端主机、'智能家居'设备和CPE,\n 描述一种针对互联网接入提供商网络的扫描技术,\n 对德国三大住宅宽带网络进行案例研究。

英文摘要:

Network scanning has been a widely used technique to gather information on the Internet as a whole. The transition from IPv4 to IPv6 causes traditional network scanning to become less useful. An increasing number of hosts is either IPv6-only or not publicly addressable via IPv4 due to the use of NAT, prompting a need for network scanning techniques for the IPv6-based Internet. All current approaches to IPv6 network scanning make use of hitlists (lists of IPv6 addresses to be scanned). A variety of methods for compiling hitlists have been presented, but they have a strong bias towards server hosts, and do not find addresses of client hosts -- smartphones, tablets, PCs, 'smart home' devices, etc. -- in a significant amount. Client hosts are the majority of devices connected to the Internet. Furthermore, when connected to a residential broadband connection, they can exchange data at substantial speeds, making them attractive targets for botnets. Scanning residential broadband networks is challenging because the active addresses are changing much more frequently than addresses of server hosts. This master's thesis aims to adapt prior IPv6 network scanning techniques to residential broadband networks. To this end, the following contributions are made: Description and evaluation of an IPv6 address space visualization method, Introduction of the NTP Pool Project as a public and passive IPv6 hitlist source detecting mostly client hosts, 'Smart Home' devices and CPEs, Description of a scanning technique for Internet access provider networks, Case study on the three major German residential broadband networks.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑