Fwd: [security-lunch] Sept 17 | Phillip Stephens on "Ten Years of ZMap: A Retrospective of a Decade of Open-Source Development"

[Alan Karp]

--------------
Alan Karp

---------- Forwarded message ---------
From: Rumaisa Habib <rum...@stanford.edu>
Date: Tue, Sep 16, 2025 at 3:02 PM
Subject: [security-lunch] Sept 17 | Phillip Stephens on "Ten Years of ZMap: A Retrospective of a Decade of Open-Source Development"
To: securit...@lists.stanford.edu <securit...@lists.stanford.edu>

Hi folks!

Tomorrow's talk will be the last security lunch for the summer quarter (we resume next week for the new academic year!). Additionally, this will be the last lunch I will be organizing. Starting next week, @Michael Leo Paper will be taking over. Going forward, please contact Michael if you'd like to give a talk at this venue.

Here are the details for tomorrow's talk:

Security Lunch ☀️ Ed. — Wednesday,  Sept 17th, 2025, 12:00 pm @ CoDa E160

Ten Years of ZMap: A Retrospective of a Decade of Open-Source Development

Phillip Stephens

Can't make it in person? Join us on zoom.

See our past & upcoming events on our website! 

Abstract: Since ZMap's debut in 2013, networking and security researchers have used the open-source scanner to write hundreds of research papers that study Internet behavior. In addition, ZMap powers much of the attack-surface management and security ratings industries, and more than a dozen security companies have built products on top of ZMap. Behind the scenes, much of ZMap's behavior---ranging from its pseudorandom IP generation to its packet construction---has quietly evolved as we have learned more about how to scan the Internet. This talk explores how ZMap's adoption over the last ten years has evolved, describes its modern behavior (and the measurements that motivated those changes), and offers lessons from releasing and maintaining ZMap relevant for other open-source projects both within and outside the internet measurement community.

Bio: Phillip Stephens is a staff software engineer working with Dr. Zakir Durumeric’s Empirical Security Research Group at Stanford University. His interests broadly include open-source software and internet measurement tooling. He builds and maintains several of the most widely used internet measurement open-source software tools including ZMap, ZDNS, and ZGrab. He has published at the Internet Measurement Conference and presented the work at IMC 2024 in Madrid, Spain. Originally from Georgia, he did his Bachelor's and Master's degrees in Computer Science at the Georgia Institute of Technology before moving to the Bay Area in 2021.

                                                                    

Rumaisa Habib 🐸

CS PhD Student, Stanford University

rumaisahabib.com

_______________________________________________
security-lunch mailing list
securit...@lists.stanford.edu
https://mailman.stanford.edu/mailman/listinfo/security-lunch