Today’s Internet is responsible for connecting billions of end-points
that interact by using a variety of protocols. Malicious actors can carry
out attacks by exploiting users, applications, or the network. Typical
attacks are two steps process: The identification of potential victims
by periodically scanning the Internet for a specific service; and the
attack itself where the exploitation of the target service is performed.
To protect systems on the Internet, we need to understand how vulnerable
systems are being targeted, how malicious actors exploit end-points, and
how attackers' behavior evolves over time. Network measurements offer
valuable resources to study such behaviors. This talk highlights how
Internet measurements can be used to improve security, and which factors
have to be considered in this research direction.