Delivering high-speed, accurate, and scalable network visibility is no longer a theoretical exercise. In our latest research under the CLEVER project, we introduce a DPDK-based network scanner that redefines how cyber defense mechanisms approach vulnerability detection.
📌 What’s new and why it matters:
- 2× scanning speed over traditional tools, processing up to 120 Mpps.
- Achieved 99.5% accuracy in detecting open ports with 40% lower CPU and memory usage than legacy scanners.
- Seamless integration of SmartNICs and hardware offloading for real-time packet processing.
- Combines active and passive scans, protocol-specific probing, and evasive techniques to bypass intrusion detection systems.
- Deploys in-network scanning directly in the core network, improving latency, accuracy, and bandwidth efficiency.
🧪 Experimental Results:
- Outperformed ZMap, IMap, and Masscan in speed, efficiency, and coverage.
- Enabled faster scan completions—2 minutes for full-port scans at 100 Gbps.
- Demonstrated robust in-network processing optimization, improving throughput by 30% and reducing latency by 15%.
🎯 This research strengthens the CLEVER project’s mission to build secure, responsive, and high-performance infrastructures for modern distributed systems.
🔗 Read the full paper from this link: https://zenodo.org/records/14944370
📚 Project: https://www.cleverproject.eu