Remote physical device fingerprinting

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2005, Pages 211-225

  Kohno, Tadayoshi ^a   Broido, Andre ^b   Claffy, Kc ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEM FIREWALLS; INTERNET; PROBABILITY;

FINGERPRINTING; SEMI-PASSIVE TECHNIQUES;

SECURITY OF DATA;

EID: 27544460278     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/sp.2005.18     Document Type: Conference Paper

References (29)

1. Endace measurement systems, 2004. URL: http://www. endace.com/.
2. Nmap free security scanner, 2004. URL: http://www. insecure.org/nmap/.
3. Project details for p0f, 2004. URL: http:// freshmeat.net/projects/p0f/.
4. VMwarc virtual infrastructure, 2004. URL: http://www. vmware.com/.
5. Xprobe official home, 2004. URL: http://www. sys-security.com/html/ projects/X.html.
6. K. G. Anagnostakis, M. Geenwald, and R. S. Ryger. cing: Measuring network-internal delays using only existing infrastructure. In INFOCOM, 2003.
7. S. M. Bellovin. A technique for counting NATted hosts. In IMW, 2002.
8. A. Broido, E. Nemeth, and k. claffy. Spectroscopy of DNS update traffic. In SIGMETRICS, 2003.
9. S. Donnelly. High precision timing in passive measurements of data networks. Ph.D. thesis, University of Waikato, Hamilton, New Zealand, 2002.
10. M. E. Dyer. Linear time algorithms for two- and three-variable linear programs. SIAM J. Comput., 13, 1984.
11. I. D. Graham, M. Pearson, J. Martens, and S. Donnelly. Dag - A cell capture board for ATM measurement systems. URL: http://dag.cs.waikato.ac.nz/.
12. R. L. Graham. An efficient algorithm for determining the convex hull of a finite planar set. Inf. Process. Lett., 1, 1972.
13. V. Jacobson, R. Braden, and D. Borman. TCP extensions for high performance. RFC 1323, May 1992.
14. K. Keys, D. Moore, R. Koga, E. Lagache, M. Tesch, and k. claffy. The architecture of the CoralReef Internet traffic monitoring software suite. In PAM, 2001.
15. T. Kohno, A. Broido, and k. claffy. Remote physical device fingerprinting. Full version of this paper, available at http://www-cse.ucsd. edu/users/tkohno/papers/PDF/, 2005.
16. 3 and related problems. SIAM J. Comput., 12, 1983.
17. J. Micheel, S. Donnelly, and I. Graham. Precision timestamping of network packets. In IMW, 2001.
18. D. Mills. Simple network time protocol (SNTP) version 4 for IPv4, IPv6 and OSI. RFC 2030, 1996.
19. D. L. Mills. Network time protocol (version 3): Specification, implementation and analysis. RFC 1305, 1992.
20. S. B. Moon, P. Skelly, and D. Towsley. Estimation and removal of clock skew from network delay measurements. In INFOCOM, 1999.
21. A. Pásztor and D. Veitch. PC based precision timing without GPS. In SIGMETRICS, 2002.
22. V. Paxson. On calibrating measurements of packet transit times. In SIGMETRICS, 1998.
23. J. Postel. Internet control message protocol. RFC 792, 1981.
24. N. Provos. A virtual honeypot framework. In Usenix Security 2004, 2004.
25. C. Shannon. The mathematical theory of communication. 1949. Urbana, University of Illinois Press.
26. D. Veitch, S. Babu, and A. Pásztor. Robust synchronization of software clocks across the Internet. In IMC, 2004.
27. F. Veysset, O. Courtay, and O. Heen. New tool and technique for remote operating system fingerprinting, 2002. URL: http://www.intranode.com/fr/doc/ ring-short-paper.pdf.
28. J. Xu, J. Fan, M. Ammar, and S. B. Moon. On the design and performance of prefix-preserving IP traffic trace anonymization. In IMW, 2001.
29. J. Xu, J. Fan, M. H. Ammar, and S. B. Moon. Prefix-preserving IP address anonymization: Measurement-based security evaluation and a new cryptography-based scheme. In ICNP, 2002.