[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-145599-en":3,"doc-seo-145599-105":30,"detail-sidebar-cat-0-en-105":91},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":4,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":14,"update_tm":28,"read_time":29},145599,1099523885336,"Taylor Morgan","https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c",6,"Technology","Network Scanning Techniques - Understanding how it is done","Network Scanning Techniques explains how scanning fits into intelligence gathering for computer security, breaking the process into foot printing, scanning, and enumeration. It defines scanning as identifying live, reachable systems and the services they expose, then details how defenders can interpret scan behavior in logs to anticipate unauthorized access attempts. The document emphasizes understanding scanner operation, signatures, and collected information to better prepare and block common scanning methods such as ICMP sweeps and broadcast ICMP.","Network Scanning Techniques  \nUnderstanding how it is done  \nOfir Arkin  \n[ofir@publicom.co.il](ofir@publicom.co.il)  \n[http://www.publicom.co.il](http://www.publicom.co.il)  \n[http://www.sys-security.com](http://www.sys-security.com)  \nNovember, 1999  \nCopyright © Ofir Arkin, 1999  \n1.0 Introduction  \n1.1 Introduction to Intelligence Gathering Techniques  \nImagine the following scenario:  \nA military target is to be attacked. What’s the first step considered?– Gathering Intelligence, naturally. To do so, a satellite will photo the target zone and a special recon unit will patrol the area with maximum caution to eliminate the possibility of detection. After enough information has been gathered, a wing of stealth bombers will bomb the target – Mission accomplished.  \nGathering intelligence is extremely important. If the amount of data collected is not sufficient, or alternatively, if the target is tightly defended, no attack will be launched.  \nThe same is true of computer hacking.  \nAn intelligent hacker will conduct a lot of research before attempting to gain privileged access to your systems.  \nIf the intelligence gathered shows a poorly defended computer system, an attack will be launched, and unauthorized access will be gained.  \nHowever, if the target is highly protected, the hacker will think twice before attempting to break in. It will be dependent upon the tools and systems that protect the target.  \nAgain, the key here is the amount of information he has gathered beforehand.  \nIn the computer hacking world, intelligence gathering can be roughly divided into three major steps:  \n• Foot printing  \n• Scanning  \n• Enumeration  \nFoot Printing-The information collected by the hacker makes a unique footprint or a profile of an organization security posture.  \nWith foot printing, using rather simple tools, we gather information such as:  \n1. Administrative, technical, and billing contacts, which include employee names, email addresses, and phone & fax numbers.  \n2. IP address range  \n3. DNS servers  \n4. Mail servers  \nAnd we can also identify some of the systems that are directly connected to the Internet. Most of the information here can be freely accessed on the Internet.  \nScanning-The art of detecting which systems are alive and reachable via the Internet, and what services they offer, using techniques such as ping sweeps , port scans , and operating system identification, is called scanning.  \nThe kind of information collected here has to do with the following:  \n1. TCP/UDP services running on each system identified.  \n2. System architecture (Sparc, Alpha, x86) .  \n3. Specific IP addresses of systems reachable via the Internet.  \n4. Operating system type.  \nScanning can be compared with a thief checking all the doors and windows of a house he wants to break into.  \nEnumeration-Enumeration is the process of extracting valid accounts or exported resource names from systems. The information is gathered using active connections to systems and queries, which is more intrusive in nature than foot printing and scanning.  \nThe techniques are mostly operating system specific, and can gather information such as:  \n1. User & group names.  \n2. System banners  \n3. Routing tables  \n4. SNMP information  \nThis article will focus on scanning, normally the second phase of computer intelligence gathering technique.  \n1.2 Introduction to scanning  \nToday the number of automated scanners is constantly increasing, and as a result, more and more attacks are successfully initiated.  \nIn order to be better prepared, we need to fully understand the scanning tools and the methods that these tools are using against us.  \nThe questions we need to ask ourselves are:1  \n• What are scanners doing?  \n• What do they look like (signature)?  \n• How they operate in order to accomplish their tasks?  \n• What kind of information is collected?  \n• How serious is the threat?  \nWe need to identify the intruder’s behavior and understand the scanning techniques. If","cbCaifxc5n07dtYc","https://ap.wps.com/l/cbCaifxc5n07dtYc","pdf",85535,1,17,"English","en",105,"# 1.0 Introduction\n## 1.1 Introduction to Intelligence Gathering Techniques\n## 1.2 Introduction to scanning\n# 2.0 PING Sweeps\n## 2.1 ICMP sweeps (ICMP ECHO requests)\n## 2.2 Broadcast ICMP","[{\"question\":\"How do foot printing, scanning, and enumeration differ in intelligence gathering?\",\"answer\":\"Foot printing builds a security posture profile, scanning discovers live reachable systems and exposed services, and enumeration extracts valid accounts or exported resource names using more intrusive queries.\"},{\"question\":\"What is the purpose of ICMP sweeps in scanning?\",\"answer\":\"ICMP sweeps determine whether target IP addresses are alive by sending ICMP ECHO requests and checking for ICMP ECHO replies.\"},{\"question\":\"How can defenders reduce the risk from ICMP-based scanning?\",\"answer\":\"Blocking ICMP ECHO requests entering the network helps, and scanning attempts can also be identified by recognizing scanning patterns in intrusion detection or log data.\"}]","Network Scanning Techniques - Understanding how it is done | PDF",1787725645,43,{"code":4,"msg":31,"data":32},"ok",{"site_id":24,"language":23,"slug":33,"title":13,"keywords":34,"description":14,"schema_data":35,"social_meta":86,"head_meta":88,"extra_data":90,"updated_unix":28},"network-scanning-techniques-understanding-how-it-is-done","",{"@graph":36,"@context":85},[37,54,68],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/document/","Document",2,{"item":49,"name":12,"@type":43,"position":50},"https://docshare.wps.com/document/technology/",3,{"item":52,"name":13,"@type":43,"position":53},"https://docshare.wps.com/document/network-scanning-techniques-understanding-how-it-is-done/145599/",4,{"url":52,"name":13,"@type":55,"author":56,"headline":13,"publisher":58,"fileFormat":61,"inLanguage":23,"description":14,"dateModified":62,"datePublished":62,"encodingFormat":61,"isAccessibleForFree":63,"interactionStatistic":64},"DigitalDocument",{"name":9,"@type":57},"Person",{"url":41,"name":59,"@type":60},"DocShare","Organization","application/pdf","2026-08-26",true,{"@type":65,"interactionType":66,"userInteractionCount":4},"InteractionCounter",{"@type":67},"ViewAction",{"@type":69,"mainEntity":70},"FAQPage",[71,77,81],{"name":72,"@type":73,"acceptedAnswer":74},"How do foot printing, scanning, and enumeration differ in intelligence gathering?","Question",{"text":75,"@type":76},"Foot printing builds a security posture profile, scanning discovers live reachable systems and exposed services, and enumeration extracts valid accounts or exported resource names using more intrusive queries.","Answer",{"name":78,"@type":73,"acceptedAnswer":79},"What is the purpose of ICMP sweeps in scanning?",{"text":80,"@type":76},"ICMP sweeps determine whether target IP addresses are alive by sending ICMP ECHO requests and checking for ICMP ECHO replies.",{"name":82,"@type":73,"acceptedAnswer":83},"How can defenders reduce the risk from ICMP-based scanning?",{"text":84,"@type":76},"Blocking ICMP ECHO requests entering the network helps, and scanning attempts can also be identified by recognizing scanning patterns in intrusion detection or log data.","https://schema.org",{"og:url":52,"og:type":87,"og:title":13,"og:site_name":59,"og:description":14},"article",{"robots":89,"canonical":52},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":92},[93,97,101,105,110,113,118,123,128,131,135],{"id":20,"doc_module":4,"doc_module_name":46,"category_name":94,"show_sort_weight":95,"slug":96},"Story & Novel",90,"story-novel",{"id":47,"doc_module":4,"doc_module_name":46,"category_name":98,"show_sort_weight":99,"slug":100},"Literature",80,"literature",{"id":53,"doc_module":4,"doc_module_name":46,"category_name":102,"show_sort_weight":103,"slug":104},"Exam",70,"exam",{"id":106,"doc_module":4,"doc_module_name":46,"category_name":107,"show_sort_weight":108,"slug":109},5,"Comic",60,"comic",{"id":11,"doc_module":4,"doc_module_name":46,"category_name":12,"show_sort_weight":111,"slug":112},50,"technology",{"id":114,"doc_module":4,"doc_module_name":46,"category_name":115,"show_sort_weight":116,"slug":117},7,"Healthcare",40,"healthcare",{"id":119,"doc_module":4,"doc_module_name":46,"category_name":120,"show_sort_weight":121,"slug":122},8,"Research & Report",30,"research-report",{"id":124,"doc_module":4,"doc_module_name":46,"category_name":125,"show_sort_weight":126,"slug":127},9,"Religion & Spirituality",20,"religion-spirituality",{"id":126,"doc_module":4,"doc_module_name":46,"category_name":129,"show_sort_weight":126,"slug":130},"World Cup","world-cup",{"id":132,"doc_module":4,"doc_module_name":46,"category_name":133,"show_sort_weight":132,"slug":134},10,"Lifestyle","lifestyle",{"id":136,"doc_module":4,"doc_module_name":46,"category_name":137,"show_sort_weight":106,"slug":138},19,"General","general"]