{"id":"https://openalex.org/W4412830303","doi":"https://doi.org/10.23919/tma66427.2025.11097012","title":"State of UDP Scanners on the Internet","display_name":"State of UDP Scanners on the Internet","publication_year":2025,"publication_date":"2025-06-10","ids":{"openalex":"https://openalex.org/W4412830303","doi":"https://doi.org/10.23919/tma66427.2025.11097012"},"language":"en","primary_location":{"id":"doi:10.23919/tma66427.2025.11097012","is_oa":false,"landing_page_url":"https://doi.org/10.23919/tma66427.2025.11097012","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 9th Network Traffic Measurement and Analysis Conference (TMA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Sina Rostami","orcid":null},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sina Rostami","raw_affiliation_strings":["Max Planck Institute for Informatics,Saarbrücken,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Informatics,Saarbrücken,Germany","institution_ids":["https://openalex.org/I4210109712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003232018","display_name":"Taha Albakour","orcid":"https://orcid.org/0009-0009-5924-6471"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Taha Albakour","raw_affiliation_strings":["Max Planck Institute for Informatics,Saarbrücken,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Informatics,Saarbrücken,Germany","institution_ids":["https://openalex.org/I4210109712"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053942798","display_name":"Tiago Heinrich","orcid":"https://orcid.org/0000-0002-8017-1293"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tiago Heinrich","raw_affiliation_strings":["Max Planck Institute for Informatics,Saarbrücken,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Informatics,Saarbrücken,Germany","institution_ids":["https://openalex.org/I4210109712"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210109712"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.16017488,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10904","display_name":"Embedded Systems Design Techniques","score":0.8314999938011169,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10904","display_name":"Embedded Systems Design Techniques","score":0.8314999938011169,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12941","display_name":"Embedded Systems and FPGA Design","score":0.7597000002861023,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12216","display_name":"Network Time Synchronization Technologies","score":0.7310000061988831,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5673617720603943},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5162020325660706},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.5114928483963013},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2423507571220398},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.17129865288734436}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5673617720603943},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5162020325660706},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.5114928483963013},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2423507571220398},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.17129865288734436}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.23919/tma66427.2025.11097012","is_oa":false,"landing_page_url":"https://doi.org/10.23919/tma66427.2025.11097012","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 9th Network Traffic Measurement and Analysis Conference (TMA)","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.mpg.de:item_3718297","is_oa":false,"landing_page_url":"https://hdl.handle.net/21.11116/0000-0013-478B-F","pdf_url":null,"source":{"id":"https://openalex.org/S4306400654","display_name":"MPG.PuRe (Max Planck Society)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I149899117","host_organization_name":"Max Planck Society","host_organization_lineage":["https://openalex.org/I149899117"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 9th Network Traffic Measurement and Analysis Conference","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W2912675049","https://openalex.org/W3047323833","https://openalex.org/W4286571641","https://openalex.org/W6610362903","https://openalex.org/W6635624157","https://openalex.org/W6677217071","https://openalex.org/W6701629550","https://openalex.org/W6745571335"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Internet":[0,86],"scanning":[1],"is":[2,58],"a":[3],"prevalent":[4],"event":[5],"on":[6,106,128],"the":[7,42,46,52,83,91,94,116,122,129,138,153],"Internet.":[8],"Scanning":[9],"can":[10,18],"have":[11,137],"both":[12],"benevolent":[13],"and":[14,26,51,64],"malicious":[15,66],"intents.":[16],"It":[17],"potentially":[19],"be":[20],"utilized":[21],"to":[22,28,109,148],"find":[23,120],"vulnerable":[24],"machines":[25],"services":[27,47,63],"then":[29],"initiate":[30],"further":[31],"intents,":[32],"such":[33,158],"as":[34,159],"Denial":[35],"of":[36,44,85,93,113,115,124,134,155],"Service":[37],"(DoS)":[38],"attacks.":[39],"Therefore,":[40],"studying":[41,82],"behavior":[43,84],"scanners,":[45],"they":[48,54],"are":[49,55],"targeting,":[50],"information":[53],"looking":[56],"for":[57,60,81,131],"essential":[59],"protecting":[61],"Internet-facing":[62],"preventing":[65],"intent":[67],"against":[68],"them.":[69],"In":[70],"this":[71,145],"work,":[72],"we":[73,89],"present":[74],"our":[75,79],"first":[76,95],"steps":[77],"towards":[78],"methodology":[80],"scanners.":[87],"Specifically,":[88],"investigate":[90],"payloads":[92,104,126,157],"scan-packets":[96],"in":[97,143,162],"User":[98],"Datagram":[99],"Protocol":[100],"(UDP).":[101],"We":[102,119,150],"group":[103],"based":[105],"their":[107],"similarities":[108],"see":[110],"different":[111],"characteristics":[112],"scanners":[114],"same":[117,140],"protocol/service.":[118],"that":[121],"variety":[123],"scan":[125],"depends":[127],"protocol":[130],"example,":[132],"99%":[133],"NTP":[135],"scans":[136,161],"exact":[139],"payload.":[141],"However,":[142],"SIP,":[144],"number":[146],"reduces":[147],"12%.":[149],"also":[151],"highlight":[152],"existence":[154],"non-standard":[156],"MGLNDD":[160],"common":[163],"UDP":[164],"services.":[165]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}