LZR: Identifying Unexpected Internet Services. (arXiv:2301.04841v1 [cs.CR])

Internet-wide scanning is a commonly used research technique that has helped
uncover real-world attacks, find cryptographic weaknesses, and understand both
operator and miscreant behavior. Studies that employ scanning have largely
assumed that services are hosted on their IANA-assigned ports, overlooking the
study of services on unusual ports. In this work, we investigate where Internet
services are deployed in practice and evaluate the security posture of services
on unexpected ports. We show protocol deployment is more diffuse than
previously believed and …

attacks deployment find internet ports posture practice protocol research scanning security security posture services studies study uncover understand work world