Detecting and defending against Web-server fingerprinting

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2002-January, Issue , 2002, Pages 321-330

  Lee, Dustin ^a   Rowe, Jeff ^a   Ko, Calvin ^a   Levitt, Karl ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Application software; Computer security; File servers; Fingerprint recognition; Information security; Laboratories; Network servers; Protection; Reverse engineering; Web server

Indexed keywords

APPLICATION PROGRAMS; LABORATORIES; PATTERN RECOGNITION; REVERSE ENGINEERING; SECURITY OF DATA; SECURITY SYSTEMS; SERVERS; WEB SERVICES; WORLD WIDE WEB;

FILE SERVERS; FINGERPRINT RECOGNITION; NETWORK SERVER; PROTECTION; WEB SERVERS;

PALMPRINT RECOGNITION;

EID: 2342647741     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2002.1176304     Document Type: Conference Paper

References (16)

1. R. Fielding, J. Gettys, J. Mogul, H. Frystyk, T. Berners-Lee. Hypertext Transfer Protocol-HTTP/1.1, RFC 2068
2. Balachander Krishnamurthy, Martin Arlitt. PROCOW: Protocol Compliance on the Web-A Longitudinal Study, 2001
3. fyodor. Remote OS detection via TCP/IP Stack FingerPrinting, http://www.insecure.org/nmap/nmapfingerprinting-article.html
4. Rain Forest Puppy. whisker, http://www.wiretrip.net/rfp/bins/whisker/
5. Rain Forest Puppy. A look at whisker's anti-IDS tactics, http://www.wiretrip.net/rfp /pages/whitepapers/whiskerids.html
6. Various. http://www.securityfocus.com, web
7. Netcraft Surveys. http://www.netcraft.com, web
8. Security Space. http://www.securityspace.com /s survey/data/index.html, web
9. Apache Group http://www.apache.org, web
10. Jigsaw W3C's Server http://www.w3.org /Jigsaw/, web
11. Security Tips for Server Configuration http://httpd.apache.org/docs/misc /security tips.html, web
12. 100hot Web Rankings http://www.100hot.com/directory/100hot/, web
13. Internet Junkbuster Proxy http://www.junkbusters.com/ijb.html, web
14. M. Smart, G. Malan, F. Jahanian. Defeating TCP/IP Stack Fingerprinting, 9th USENIX Security Symposium
15. D. Watson, M. Smart, G. Malan, F. Jahanian. Protocol Scrubbing: Network Security through Transparent Flow Modification, DISCEX '01. Proceedings, Volume: 2, 2001
16. Can I take legal actions against port scanning? http://www.sans.org/newlook/resources/IDFAQ /port scanning legal.htm