Uncovering identities: A study into VPN tunnel fingerprinting

Computers and Security

Volumn 25, Issue 2, 2006, Pages 97-105

  Izadinia, Vafa D ^a,g   Kourie, D G ^a   Eloff, J H P ^a,b,c,d,e,f  

^a UNIVERSITY OF PRETORIA   (South Africa)

^b School of Informatoin Technology   (South Africa)

^c Technical Committee 11 (Information Security)   (South Africa)

^d ISO (International Standards Organisation)   (France)

^e NATIONAL RESEARCH FOUNDATION   (South Africa)

^f South African Council for Natural Scientific Professions   (South Africa)

^g Pretoria University ^*

Author keywords

Fingerprinting; Internet Key Exchange (IKE); IPSec; Traffic analysis; Virtual Private Network (VPN)

Indexed keywords

FINGERPRINTING; INTERNET KEY EXCHANGE (IKE); IPSEC; TRAFFIC ANALYSIS; VIRTUAL PRIVATE NETWORK (VPN);

COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; CRYPTOGRAPHY; ELECTRONIC COMMUNITIES; TELECOMMUNICATION TRAFFIC;

CHARACTER RECOGNITION;

EID: 33644781732     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2005.12.008     Document Type: Article

References (27)

1. Z. Aqun, Y. Yuan, J. Yi, and G. Guanqun Research on tunneling techniques in virtual private networks Correspondence Journal 21 6 2000 Note: Journal entry may not be accurate [Original in Chinese, translated by babelfish.altavista.com]
2. Arkin O. ICMP usage in scanning: the complete know-how, version 3; 2001.
3. O. Arkin, and F. Yarochkin ICMP based remote OS TCP/IP stack fingerprinting techniques Phrack Magazine 11 57 2001 [File 7 of 12]
4. R. Beverly A robust classifier for passive TCP/IP fingerprinting Passive and active network measurement, 5th international workshop, PAM 2004, Antibes Juan-les-Pins, France, April 19-20, 2004, Proceedings Lecture notes in computer science vol. 3015 2004 Springer
5. Bordet J. Remote SMTP server detection; 2002.
6. Broido A, Claffy K. Internet topology: connectivity of IP graphs. In: Proceedings of SPIE international symposium on convergence of IT and communication; 2001.
7. Cisco Systems, Inc. IP fragmentation and PMTUD Document ID: 25885. Tech. rep. 2004 Cisco Systems
8. . Detection with ARP. Napalm e-zineNote: the source for this reference was not readily available, however it was traced with help from ouah_@hotmail.com and datacide@beefed.org ; 2000.
9. Davies J. IKE Negotiation for IPSec Security Associations. The cable guy; June 2002 [a Microsoft TechNet publication].
10. N. Dunbar IPSec networking standards - an overview Tech. rep. 2001 Hewlett-Packard Company, Infrastructure Strategic Engineering Division
11. f0bic. Examining remote OS detection using LPD querying; 2001.
12. D. Harkins, and D. Carrel RFC 2409 - the Internet key exchange (IKE) Tech. rep. 1998 IETF
13. Hills R. NTA monitor UDP backoff pattern fingerprinting white paper. Tech. rep. NTA; 2003.
14. B. Huffaker, D. Plummer, D. Moore, and K. Klaffy Topology discovery by active probing Tech. rep. 2001 Cooperative Association for Internet Data Analysis
15. ICSA-Labs IPSec technical product configuration guidelines Tech. rep. 2003 ICSA Labs - a division of TruSecure Corporation
16. Izadinia VD. Fingerprinting encrypted tunnel endpoints. MSc. dissertation. South Africa: Computer Science Department, University of Pretoria; 2004.
17. KAME. Racoon manual pages - racoon(8), racoon.conf(5), setkey(8); 2000.
18. N. Koblitz A course in number theory and cryptography 2nd ed. Graduate texts in mathematics vol. 114 1994 Springer Verlag
19. D. Lee, J. Rowe, C. Ko, and K. Levitt Detecting and defending against web-server fingerprinting Proceedings of the 18th annual computer security applications conference, 2002 2002 IEEE Computer Society
20. Lowekamp B. Combining active and passive network measurements to build scalable monitoring systems on the grid. ACM SIGMETRICS Performance Evaluation Review 30; 2003.
21. D. Maughan, M. Schertler, M. Schneider, and J. Turner RFC 2408 - Internet security association and key management protocol (ISAKMP) Tech. rep. 1998 IETF
22. Nazario J. Passive system fingerprinting using network client applications; 2000.
23. R. Perlman, and C. Kaufman Key exchange in IPSec: analysis of IKE IEEE Internet Computing 4 6 2000
24. B. Schneier Applied cryptography 2nd ed. 1996 John Wiley & Sons
25. B. Schneier, and N. Ferguson Practical cryptography 1st ed. 2003 John Wiley & Sons
26. F. Veysset, O. Courtay, and O. Keen New tool for remote operating system fingerprinting Tech. rep. 2002 Intranode Software Technologies
27. Yarochkin F. Remote OS detection via TCP/IP stack fingerprinting; 1999.