Integrate mechanisms to alias Shodan records to hosts

[cunha]

Waiting on #13

Shodan may scan hosts at different points in time. IP addresses dynamically allocated to hosts do not represent a single device and each scan needs to be processed separately.

We need to design mechanisms for aliasing Shodan records to hosts, that is, identify if two Shodan records for the same IP address belong to the same device or not. Aliasing mechanisms:

• Match cryptographic fingerprints observed on the Shodan record
  • SSH
  • HTTPS
  • DNSSEC
  • TLS/SSL certificates
• Match scans for the same device collected at different points in time
  • Infer IP is static between two consecutive identical scans
  • Evaluate if we can infer IP as static after X identical Shodan scans #13

[cunha]

Find fields that

1. Have one shared identical value across all occurrences for a given (module, IP, port) measurement.
2. Have one distinct value for each occurrance for a given (field, module). In other words, each IP must have a different value for that field.