Remote physical device fingerprinting

IEEE Transactions on Dependable and Secure Computing

Volumn 2, Issue 2, 2005, Pages 93-108

  Kohno, Tadayoshi ^a   Broido, Andre ^b   Claffy, K C ^b,c  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

^c UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Network level security and protection; Privacy

Indexed keywords

COMPUTER OPERATING SYSTEMS; DATA PRIVACY; INTERNET; NETWORK PROTOCOLS; VIRTUAL REALITY;

FINGERPRINTING; NETWORK-LEVEL SECURITY AND PROTECTION; PRIVACY;

COMPUTER HARDWARE;

EID: 24344507334     PISSN: 15455971     EISSN: None     Source Type: Journal    
DOI: 10.1109/TDSC.2005.26     Document Type: Conference Paper

References (37)

1. Endace measurement systems, http://www.endace.com/, 2004.
2. Nmap free security scanner, http://www.insecure.org/nmap/, 2004.
3. Project details for p0f, http://freshmeat.net/projects/p0f/, 2004.
4. VMware virtual infrastructure, http://www.vmware.com/, 2004.
5. Xprobe official home, http://www.sys-security.com/index.php?page=xprobe, 2004.
6. K.G. Anagnostakis, M. Greenwald, and R.S. Ryger, "cing: Measuring Network-Internal Delays Using Only Existing Infrastructure," Proc. INFOCOM Conf., 2003.
7. S.M. Bellovin, "A Technique for Counting NATted Hosts," Proc. Internet Measurement Workshop, 2002.
8. R. Bhagwan, S. Savage, and G.M. Voelker, "Understanding Availability," Proc. Second Int'l Workshop Peer-to-Peer Systems, 2003.
9. A. Broido, Y. Hyun, and K. Claffy, "Spectroscopy of Traceroute Delays," Proc. Int'l Workshop Passive and Active Measurement, 2005.
10. A. Broido, R. King, E. Nemeth, and K. Claffy, "Radon Spectroscopy of Inter-Packet Delay," Proc. IEEE High-Speed Networking Workshop, 2003.
11. A. Broido, E. Nemeth, and K. Claffy, "Spectroscopy of DNS Update Traffic," Proc. SIGMETRICS, 2003.
12. S. Donnelly, "High Precision Timing In Passive Measurements of Data Networks," PhD thesis, Univ. of Waikato, Hamilton, New Zealand, 2002.
13. M.E. Dyer, "Linear Time Algorithms for Two- and Three-Variable Linear Programs," SIAM J. Computing, vol. 13, 1984.
14. Y. Etsion, D. Tsafrir, and D.G. Feitelson, "Effects of Clock Resolution On the Scheduling of Interactive and Soft Real-Time Processes," Proc. SIGMETRICS, 2003.
15. I.D. Graham, M. Pearson, J. Martens, and S. Donnelly, "Dag - A Cell Capture Board for ATM Measurement Systems," http://dag.cs.waikato.ac.nz/ dag/papers/dag1997.html, 1997.
16. R.L. Graham, "An Efficient Algorithm for Determining the Convex Hull of a Finite Planar Set," Information Processing Letters, vol. 1, 1972.
17. A. Hussain, J. Heidemann, and C. Papadopoulos, "A Framework for Classifying Denial of Service Attacks," Proc. SIGCOMM, 2003.
18. V. Jacobson, R. Braden, and D. Borman, "TCP Extensions for High Performance," RFC 1323, May 1992
19. K. Keys, D. Moore, R. Koga, E. Lagache, M. Tesch, and K. Claffy, "The Architecture of the Coralreef Internet Traffic Monitoring Software Suite," Proc. Int'l Workshop Passive and Active Measurement, 2001.
20. T. Kohno, A. Broido, and K. Claffy, "Remote Physical Device Fingerprinting," Proc. IEEE Symp. Security and Privacy, 2005.
21. B. McDanel, "TCP Timestamping and Remotely Gathering Uptime Information," bugtraq@securityfocus.com, 2001.
22. 3 and Related Problems," SIAM J. Computers, vol. 12, 1983.
23. J. Micheel, S. Donnelly, and I. Graham, "Precision Timestamping of Network Packets," Proc. Internet Measurement Workshop, 2001.
24. D. Mills, "Simple Network Time Protocol (SNTP) Version 4 for IPv4, IPv6 and OSI," RFC 2030, 1996.
25. D.L. Mills, "Network Time Protocol (Version 3): Specification, Implementation and Analysis," RFC 1305, 1992.
26. S.B. Moon, P. Skelly, and D. Towsley, "Estimation and Removal of Clock Skew From Network Delay Measurements," Proc. INFOCOM Conf., 1999
27. C. Partridge, D. Cousins, A.W. Jackson, R. Krishnan, T. Saxena, and W.T. Strayer, "Using Signal Processing to Analyze Wireless Data Traffic," Proc. ACM Workshop Wireless Security, 2002.
28. A. Pásztor and D. Veitch, "PC Based Precision Timing without GPS," Proc. SIGMETRICS Conf., 2002.
29. V. Paxson, "On Calibrating Measurements of Packet Transit Times," Proc. SIGMETRICS Conf., 1998
30. J. Postel, "Internet Control Message Protocol," RFC 792, 1981.
31. N. Provos, "A Virtual Honeypot Framework," Proc. Usenix Security Conf., 2004.
32. R. Rager XMIT_ID version 2.61, http://xmit.penguinman.com/xmit_id.html, 2005.
33. C. Shannon, The Mathematical Theory of Communication. Urbana, II.: Univ. of Illinois Press, 1949.
34. D. Veitch, S. Babu, and A. Pásztor, "Robust Synchronization of Software Clocks Across the Internet," Proc. Fourth ACM SIGCOMM Conf. Internet Measurement, 2004.
35. F. Veysset, O. Courtay, and O. Heen, "New Tool and Technique for Remote Operating System Fingerprinting," http://www.intranode.com/fr/doc/ ring-short-paper.pdf, 2002.
36. J. Xu, J. Fan, M. Ammar, and S.B. Moon, "On the Design and Performance of Prefix-Preserving IP Traffic Trace Anonymization," Proc. Fourth ACM SICCOMM Conf. Internet Measurement, 2001.
37. J. Xu, J. Fan, M.H. Ammar, and S.B. Moon, "Prefix-Preserving IP Address Anonymization: Measurement-Based Security Evaluation and a New Cryptography-Based Scheme," Proc. IEEE Int'l Conf. Network Protocols, 2002.