Note:
- ⭐ Please leave a STAR if you like this project! ⭐
- If you find any incorrect / inappropriate / outdated content, please kindly consider opening an issue or a PR.
- We would greatly appreciate your contribution to this list, and you will appear in the contributors✨!
- About
- Datasets
- Tools
- Survey & Benchmark
- IPv6 Network Measurement & Analysis
- Research Groups
- Blogs
- Tool Libraries and Frameworks
- News and Updates
- Contributors 🌟
A curated knowledge base for IPv6 Network Measurement, specifically emphasizing target generation strategies, active security auditing, benchmark datasets, and leading research laboratories.
| Dataset | Category | Description | Source / Link | Status |
|---|---|---|---|---|
| IPv6 Hitlist | Core Seeds | The standard active IPv6 address list (Gasser et al.). The primary baseline for liveness. | IPv6 Hitlist | 🟢 Daily |
| Rapid7 FDNS | Core Seeds | (Project Sonar) Forward DNS AAAA records. Massive source of active domains mapped to IPv6. | Rapid7 Open Data | 🟢 Regularly |
| CAIDA Ark | Topology | (Formerly "Scamper") Global traceroute data. Essential for verifying connectivity and path analysis. | CAIDA Archipelago | 🟢 Regularly |
| CAIDA DNS Names | Topology | IPv6 hostnames derived from active traceroutes (Reverse DNS). Useful for identifying infrastructure roles. | CAIDA Catalog | 🟢 Req. Access |
| Censys Certs | Domains | IPv6-ready domains extracted from X.509 Certificates (CT Logs). Requires BigQuery access. | Censys Research | 🟡 Application |
| Routeviews Prefix | Metadata | (AS Mappings) Maps IP prefixes to Autonomous Systems (AS). Used for network-level aggregation. | CAIDA / Routeviews | 🟢 Daily |
| Tranco | Rankings | A research-oriented top sites ranking, hardened against manipulation. | Tranco List | 🟢 Daily |
| Majestic Million | Rankings | Top 1M domains based on backlink analysis. | Majestic | 🟢 Daily |
| Cisco Umbrella | Rankings | Top 1M domains based on DNS usage. (Note: Access policy varies). | Cisco Umbrella | 🟡 Variable |
| Alexa Top 1M | Rankings | [Retired] Historical web traffic ranking. Discontinued in May 2022. | Archived | 🔴 Retired |
| Tool | Language | GitHub Repository | Description & Notes |
|---|---|---|---|
| ZMap | C | zmap/zmap | [Standard] ZMap v6 实际上已经合并进主分支了,不需要找单独的 ZMapv6 库。大多数发行版直接支持。 |
| Masscan | C | robertdavidgraham/masscan | [High-Speed] 号称最快的异步端口扫描器。注意它的 IPv6 支持需要特定参数开启。 |
| Nmap | C/C++ | nmap/nmap | [Auditing] 世界上最著名的扫描器。不仅是扫描,更重要的是它的 NSE 脚本引擎。 |
| Scamper | C | CAIDA/scamper * | [Topology] CAIDA 的核心工具。注:它主要通过 CAIDA 官网分发源码包,GitHub 上主要是镜像或非官方维护版。建议去官网下。 |
| Yarrp | C++ | cmand/yarrp | [Trace] "Yelling at Random Routers Progressively". 极速拓扑发现工具,CMAND 团队维护。 |
| XMap | C | idealeer/xmap | [Research] 基于 ZMap 改写,专门优化了 IPv6 探测效率。 |
| Scanv6 | Go | IPv6-Security/scanv6 | [New] 6Sense的Golang Scanner。它是 6SENSE 系统的一部分,支持“黑名单”和“反馈循环”。 |
- Target Acquired? Evaluating Target Generation Algorithms for IPv6. P. Foremski.
IEEE INFOCOM 2023. (针对目标生成算法的系统性评估) - Seeds of Scanning: Exploring the Effects of Datasets, Methods, and Metrics on IPv6 Internet Scanning. Lion Steger.
ACM SIGCOMM 2024. (对扫描方法论与评估指标的深度剖析) - Unveiling IPv6 Scanning Dynamics: A Longitudinal Study Using Large Scale Proactive and Passive IPv6 Telescopes. Q. Lone.
ACM IMC 2024. (关于IPv6扫描动态性的长期测量研究) - Censys: A Map of Internet Hosts and Services. Liz Izhikevich.
ACM SIGCOMM 2024. (互联网资产测量的工业级基准与系统架构)
- A Survey on IPv6 Security Threats and Defense Mechanisms. S. J. Ma.
CANS 2022. (IPv6 安全威胁与防御机制综述) - IPv6 Routing Protocol for Low-Power and Lossy Networks Security Vulnerabilities and Mitigation Techniques: A Survey. K. Shaukat.
ACM Computing Surveys 2024. (低功耗有损网络中 RPL 协议的安全性分析) - IPv6 routing protocol enhancements over low-power and lossy networks for IoT applications: A systematic review. T. Al-Janabi.
New Review of Hypermedia and Multimedia 2022. (IoT 场景下的 IPv6 路由增强技术综述) - 6TiSCH – IPv6 Enabled Open Stack IoT Network Formation: A Review. S. K. Singh.
ACM Computing Surveys 2022. (IPv6 与 6TiSCH 协议栈网络构建综述)
- 6Hit: A Reinforcement Learning-based Approach to Target Generation for Internet-wide IPv6 Scanning. Bingnan Hou.
INFOCOM 2021.[无源码] - 6Sense: Internet-Wide IPv6 Scanning and its Security Applications. Grant Williams.
USENIX Security 2024.[code]
- IPv6 Prefix Target Generation through Pattern and Distribution Learning using Vision-Transformer and Guided-Diffusion. Yaochen Ren.
INFOCOM 2025.[code] - 6GAN: IPv6 Multi-Pattern Target Generation via Generative Adversarial Nets with Reinforcement Learning. Tianyu Cui.
INFOCOM 2021. [code] - 6GCVAE: Gated Convolutional Variational Autoencoder for IPv6 Target Generation. Tianyu Cui.
PAKDD 2020. [code] - 6VecLM: Language Modeling in Vector Space for IPv6 Target Generation. Tianyu Cui.
ECML PKDD 2020[code] - 6Forest: An Ensemble Learning-based Approach to Target Generation for Internet-wide IPv6 Scanning Tao Yang.
INFOCOM 2022[code] - 6Graph: : A graph-theoretic approach to address pattern mining for Internet-wide IPv6 scanning. Tao Yang.
Computer Networks 2022[code]
- Entropy/IP: Uncovering Structure in IPv6 Addresses. Paweł Foremski.
IMC 2016[code] - DET: Enabling Efficient Probing of IPv6 Active Addresses. Guanglei Song.
IEEE/ACM Transactions on Networking 2022[code] - 6Tree: : Efficient dynamic discovery of active addresses in the IPv6 address space.Zhizhu Liu
Computer Networks 2019[code] - 6Scan: A High-Efficiency Dynamic Internet-Wide IPv6 Scanner With Regional Encoding.Bingnan Hou
IEEE/ACM Transactions on Networking 2023[code] - Search in the Expanse: Towards Active and Global IPv6 Hitlists. Bingnan Hou
IEEE/ACM Transactions on Networking 2023[无源码]
- Entropy (Entropy/IP)
- 6GCVAE
- 6VecLM
- 6GAN
- 6Graph
- 6Forest
- 6Tree
- DET
- 6Hit
- 6Scan
- 6Sense
- Where Have All the Firewalls Gone? Security Consequences of Residential IPv6 Transition
- Don't Forget to Lock the Back Door!
- Sibling Prefixes: Identifying Similarities in IPv4 and IPv6 Prefixes
Chinese Academy of Sciences, University of Chinese Academy of Sciences/China
- Gang Xiong (Institute of Information Engineering)
- Kai Chen (Institute of Information Engineering)
- Qixu Liu (Institute of Information Engineering)
- Guozhu Meng (Institute of Information Engineering)
- Qingyun Liu (Institute of Information Engineering)
- Zhigang Lu (Institute of Information Engineering)
- Xiaodong Li (Institute of Computing Technology)
- Zhenyu Li (Institute of Computing Technology)
- Yujun Zhang (Institute of Computing Technology)
- Yuqing Zhang (School of Computer Science and Technology)
Tsinghua University/China
Zhejiang University/China
Harbin Institute of Technology/China
Beijing University of Posts and Telecommunications/China
Beijing Institute of Technology/China
Beihang University/China
Xi'an Jiaotong University/China
Shanghai Jiao Tong University/China
Others
- Guang Cheng (Southeast University/China)
- Fengwei Zhang (Southern University of Science and Technology/China)
- Qian Wang (Wuhan University/China)
- Min Yang (Fudan University/China)
- Shuguang Cui (The Chinese University of Hong Kong/China)
Overseas
- Xuemin (Sherman) Shen (University of Waterloo/Canada)
- Xiaofeng Wang (Indiana University Bloomington/United States)
- Tao Wang (Simon Fraser University/Canada)
- Ivan Martinovic (University of Oxford/United Kingdom)
- Amir Houmansadr (University of Massachusetts Amherst/United States)
- Giuseppe Aceto (Università di Napoli Federico II/Italy)
- Antonio Pescapè (Università di Napoli Federico II/Italy)
- Thorsten Holz (CISPA Helmholtz Center for Information Security/Germany)
- Mohammad Saidur Rahman (University of Texas at El Paso/United States)
- Yue Zhang (Drexel University/United States)
- Xinyu Xing (Northwestern University/United States)
- Yang Liu (Nanyang Technological University/Singapore)
- Alessandro Finamore (Huawei Technologies/France)
- Thijs van Ede (University of Twente/Netherlands)
| 实验室名称 | 机构 | 研究领域 | 活跃状态 |
|---|---|---|---|
| PRL (Privacy Research Lab) | Princeton University | 网络隐私、加密通信、流量特征分析 | 🟢 活跃 |
| Computer Security and Industrial Cryptography (COSIC) | KU Leuven (比利时) | 加密协议、网络匿名性、安全通信 | 🟢 活跃 |
| Network and Distributed Systems Security (NDSS Lab) | UC Irvine | 加密协议、匿名通信分析 | 🟢 活跃 |
| Information Security Group (ISG) | Royal Holloway, University of London | 流量分析、TLS/QUIC研究 | 🟢 活跃 |
| SecLab | Northeastern University | 加密通信、网络测量、反审查 | 🟢 活跃 |
| Security and Privacy Engineering Lab (SPRITE) | Georgia Tech | 加密流量、IoT安全、数据保护 | 🟢 活跃 |
| CISPA Helmholtz Center | 德国 | 加密通信协议分析、网络匿名性 | 🟢 活跃 |
- flowcontainer
- scapy
- wireshark
- pyshark
- Cisco Talos
- Joy
- Proxifier
- traffic_classification_utils
- Website-Fingerprinting-Library (WFlib)
Version 2.0
March 22, 2025
- Welcome to the New Contributors!
- The content is presented with a clearer structure and style.
- Fixed some errors.
Version 1.0
April 15, 2022
- Welcome to the Ph.Ds from IIE,CAS.
Thanks goes to these wonderful people!
Xinjie Lin 🎯 📝 📔 |
Tianyu Cui 🎯 |
Minghao Jiang 🎯 |
Zhong Guan 🎯 📝 |
Wei Cai 🎯 |
Xiyuan Zhang 🎯 📝 |
Junnan Yin 🎯 📝 |
Fulin Zhou 🎯 📝 |
