文章基本信息

标题：Contactless Vulnerability Analysis using Google and Shodan
本地全文：下载
作者：Kai Simon ; Cornelius Moucha ; Jörg Keller 等
期刊名称：Journal of Universal Computer Science
印刷版ISSN：0948-6968
出版年度：2017
卷号：23
期号：4
页码：404-430
出版社：Graz University of Technology and Know-Center
摘要：The increasing number of attacks on internet-based systems calls for security measures on behalf those systems' operators. Beside classical methods and tools for penetration testing, there exist additional approaches using publicly available search engines. We present an alternative approach using contactless vulnerability analysis with both classical and subject-specific search engines. Based on an extension and combination of their functionality, this approach provides a method for obtaining promising results for audits of IT systems, both quantitatively and qualitatively. We evaluate our approach and confirm its suitability for a timely determination of vulnerabilities in large-scale networks. In addition, the approach can also be used to perform vulnerability analyses of network areas or domains in unclear legal situations.
关键词：Google; Shodan; contactless test technique; vulnerability analysis