Revealing the Black Box of Device Search Engine: Scanning Assets, Strategies, and Ethical Consideration
Mengying Wu
Network and Distributed System Security (NDSS) Symposium 2025 · Day 1 · Internet Security
In an increasingly interconnected world, the proliferation of internet-connected devices has introduced unprecedented convenience alongside significant security vulnerabilities. This presentation, "Revealing the Black Box of Device Search Engine: Scanning Assets, Strategies, and Ethical Consideration," delivered by Mengying Wu from D University at the NDSS Symposium, delves into the clandestine operations of **device search engines**. These powerful platforms, often likened to Google for the Internet of Things (IoT), continuously scan the internet to index open ports, identified services, product information, and even screenshots of exposed devices. The talk critically examines the methodologies employed by these engines, their impact on internet security, and the profound ethical implications of their scanning practices.
AI review
Legitimate measurement research with a clever methodology — using IP mirror services to fingerprint scanner infrastructure is genuinely novel — but the findings land somewhere between 'interesting' and 'actionable' without quite reaching either peak. The ethical framework feels like academic scaffolding bolted onto empirical data that already tells the story.