Being able to enumerate potentially vulnerable IoT devices across the Internet is important,
because it allows for assessing global Internet risks and enables network operators to check …

Denial-of-Service attacks have rapidly increased in terms of frequency and intensity, steadily
becoming one of the biggest threats to Internet stability and reliability. However, a rigorous …

Scanning of hosts on the Internet to identify vulnerable devices and services is a key
component in many of today's cyberattacks. Tracking this scanning activity, in turn, provides …

Low Earth Orbit (LEO) satellite mega-constellations promise ubiquitous network services to"
unconnected" users. But their upcoming global routing for Earth will be unstable due to …

We examine the current state of user network performance and opportunities to improve it
from the vantage point of Facebook, a global content provider. Facebook serves over 2 …

Internet-wide scanning depends on a notion of liveness: does a target IP address respond to
a probe packet? However, the interpretation of such responses, or lack of them, is nuanced …

With the ongoing exhaustion of free address pools at the registries serving the global
demand for IPv4 address space, scarcity has become reality. Networks in need of address …

To mitigate IPv4 exhaustion, IPv6 provides expanded address space, and NAT allows a
single public IPv4 address to suffice for many devices assigned private IPv4 address space …

In this study, we report on techniques and analyses that enable us to capture Internet-wide
activity at individual IP address-level granularity by relying on server logs of a large …

Traditional DDoS attack detection monitors volumetric traffic features to detect attack onset.
To reduce false positives, such detection is often conservative---raising an alert only after a …