{"id":"https://openalex.org/W2744630832","doi":"https://doi.org/10.23919/tma.2017.8002909","title":"Profiling internet scanners: Spatiotemporal structures and measurement ethics","display_name":"Profiling internet scanners: Spatiotemporal structures and measurement ethics","publication_year":2017,"publication_date":"2017-06-01","ids":{"openalex":"https://openalex.org/W2744630832","doi":"https://doi.org/10.23919/tma.2017.8002909","mag":"2744630832"},"language":"en","primary_location":{"id":"doi:10.23919/tma.2017.8002909","is_oa":false,"landing_page_url":"https://doi.org/10.23919/tma.2017.8002909","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 Network Traffic Measurement and Analysis Conference (TMA)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078574033","display_name":"Johan Mazel","orcid":"https://orcid.org/0009-0002-0222-6794"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Johan Mazel","raw_affiliation_strings":["NII/ANSSI/JFLI"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NII/ANSSI/JFLI","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069426959","display_name":"Romain Fontugne","orcid":"https://orcid.org/0000-0002-9816-5625"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Romain Fontugne","raw_affiliation_strings":["IIJ Research Lab"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IIJ Research Lab","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101814201","display_name":"Kensuke Fukuda","orcid":"https://orcid.org/0000-0001-8372-2807"},"institutions":[{"id":"https://openalex.org/I4210110163","display_name":"Nippon Soken (Japan)","ror":"https://ror.org/01yk36x23","country_code":"JP","type":"company","lineage":["https://openalex.org/I4210110163"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kensuke Fukuda","raw_affiliation_strings":["NII/Sokendai"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NII/Sokendai","institution_ids":["https://openalex.org/I4210110163"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6591,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.73735889,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/troubleshooting","display_name":"Troubleshooting","score":0.7893359661102295},{"id":"https://openalex.org/keywords/documentation","display_name":"Documentation","score":0.6613557934761047},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6404278874397278},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6288765072822571},{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.6147639751434326},{"id":"https://openalex.org/keywords/brain-scanning","display_name":"Brain scanning","score":0.5228086709976196},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.315035879611969}],"concepts":[{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.7893359661102295},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.6613557934761047},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6404278874397278},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6288765072822571},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.6147639751434326},{"id":"https://openalex.org/C2909512900","wikidata":"https://www.wikidata.org/wiki/Q551875","display_name":"Brain scanning","level":2,"score":0.5228086709976196},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.315035879611969},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C2989005","wikidata":"https://www.wikidata.org/wiki/Q214963","display_name":"Nuclear medicine","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/tma.2017.8002909","is_oa":false,"landing_page_url":"https://doi.org/10.23919/tma.2017.8002909","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 Network Traffic Measurement and Analysis Conference (TMA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7300000190734863}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W177792351","https://openalex.org/W284347760","https://openalex.org/W1669806660","https://openalex.org/W1744212210","https://openalex.org/W1982812298","https://openalex.org/W1988182815","https://openalex.org/W2001637908","https://openalex.org/W2009250465","https://openalex.org/W2038536589","https://openalex.org/W2040333627","https://openalex.org/W2042839074","https://openalex.org/W2044354000","https://openalex.org/W2048835737","https://openalex.org/W2061133001","https://openalex.org/W2070775229","https://openalex.org/W2073148641","https://openalex.org/W2095373093","https://openalex.org/W2096030967","https://openalex.org/W2104899073","https://openalex.org/W2112736324","https://openalex.org/W2114398364","https://openalex.org/W2118325404","https://openalex.org/W2139304259","https://openalex.org/W2152436591","https://openalex.org/W2155372789","https://openalex.org/W2170196582","https://openalex.org/W2292723020","https://openalex.org/W6610362903","https://openalex.org/W6637397297","https://openalex.org/W6645986073","https://openalex.org/W6677217071"],"related_works":["https://openalex.org/W3013479934","https://openalex.org/W4318325534","https://openalex.org/W4240398146","https://openalex.org/W2467308209","https://openalex.org/W2913357653","https://openalex.org/W1981753479","https://openalex.org/W4312489236","https://openalex.org/W4238338086","https://openalex.org/W4205094947","https://openalex.org/W2045368665"],"abstract_inverted_index":{"Scanning":[0],"is":[1],"ubiquitous":[2],"on":[3,136],"the":[4,17,24,36,44,71,80,123,137,143,172],"Internet.":[5],"It":[6],"assists":[7],"administrators":[8],"to":[9,15,22,57,69,97,155],"troubleshoot":[10],"their":[11],"own":[12],"network,":[13],"researchers":[14],"survey":[16],"Internet,":[18],"and":[19,47,79,102,152],"malicious":[20,138],"actors":[21],"assess":[23],"attack":[25],"surface":[26],"of":[27,66,73,82,119,126,140,145,175,180],"targeted":[28],"networks.":[29,90],"As":[30],"users":[31],"requirements":[32],"vary,":[33],"scans":[34],"in":[35,88],"wild":[37],"exhibit":[38],"very":[39],"diverse":[40],"characteristics.":[41],"For":[42],"example,":[43],"coverage,":[45],"stealthiness":[46],"probing":[48],"speed":[49],"are":[50,158],"drastically":[51],"varying":[52],"from":[53,171],"one":[54],"scanning":[55,77,83,99,150,167],"IP":[56],"another.":[58],"In":[59,113,142],"this":[60,131],"paper,":[61],"we":[62,115],"study":[63,163],"15":[64],"years":[65],"backbone":[67],"traffic":[68],"understand":[70],"evolution":[72],"mass-scanning":[74],"tool":[75],"usage,":[76],"pattern":[78],"concentration":[81],"IPs":[84,168],"(also":[85],"called":[86],"scanners)":[87],"small":[89],"We":[91],"also":[92],"propose":[93],"a":[94],"new":[95],"method":[96],"classify":[98],"IPs'":[100],"spatial":[101],"temporal":[103],"structure":[104],"into":[105],"three":[106],"profiles":[107],"that":[108,117,165],"reveal":[109],"vastly":[110],"different":[111],"intent.":[112],"particular,":[114],"find":[116],"33%":[118],"scanners":[120],"repeatedly":[121],"target":[122],"same":[124],"set":[125],"hosts.":[127],"If":[128],"unsolicited,":[129],"identifying":[130],"behavior":[132],"provides":[133],"good":[134],"insights":[135],"intent":[139],"scanners.":[141,176],"case":[144],"innocuous":[146],"scanners,":[147],"publicly":[148],"documenting":[149],"activities":[151],"giving":[153],"right":[154],"opt":[156],"out":[157],"common":[159],"ethical":[160],"practices.":[161,187],"Our":[162],"shows":[164],"documented":[166],"behave":[169],"differently":[170],"vast":[173],"majority":[174],"Furthermore,":[177],"only":[178],"39%":[179],"these":[181],"entities":[182],"follow":[183],"online":[184],"documentation":[185],"best":[186]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}