Clustering Payloads: Grouping Randomized Scan Probes Into Campaign Templates

Over the past decade, the scanning landscape has significantly changed. Powerful tools such as Masscan or Zmap allow anyone to scan the entire Internet in a matter of hours. Simultaneously, we witnessed the emergence of stealthy scanners, which map the Internet from thousands of vantage points at a low rate attempting to forego detection. As...

Fingerprinting tooling used for SSH compromisation attempts

In SSH brute forcing attacks, adversaries try a lot of different username and password combinations in order to compromise a system. As such activities are easily recognizable in log files, sophisticated adversaries distribute brute forcing attacks over a large number of origins. Effectively finding such distributed campaigns proves however...

Classifying scanners: Mapping their behaviour

This thesis focuses on the classification of behavioural aspects of scanners based on unroutable traffic collected from two /16 subnets. Firstly the study determines that the use of a smaller dataset achieves similar results and allows for the same correctness compared to larger ones. Secondly different scanning tools are analysed, and methods...

Stage registratie systeem voor Lentiz | Maaslandcollege

Er is in opdracht van de TU Delft faculteit Elektrotechniek, Wiskunde en Informatica (EWI) in de vorm van een Bachelor Eindproject (BEP) een stage registratiesysteem gemaakt voor het Lentiz | Maaslandcollege. Bij de opdrachtgever is er geïnventariseerd wat de wensen waren waarna wij uitkwamen op een stage registratie web applicatie waar de...