Caracterização escalável de vulnerabilidades de segurança: um estudo de caso na internet brasileira

Abstract

Monitoring services such as Shodan are increasingly popular for tracking applications and vulnerabilities on the Internet. In this paper we analyze monitoring data from Shodan to characterize vulnerabilities found in Brazilian networks. In addition, we discuss Data Science methods to scale and improve the depth of the analyses, and combine external network and vulnerability metadata to support richer results and conclusions. Our characterization exposes several vulnerabilities of high severity, and some of them remain widespread despite being five years old. We hope that the analyses presented inthis paper will encourage organizations to deploy updates and protection me-chanisms to mitigate these threats.