Xprobe2++: Low volume remote network information gathering tool

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2009, Pages 205-210

  Yarochkin, Fedor V ^a   Arkin, Ofir ^a,b   Kydyraliev, Meder ^a,c   Dai, Shih Yao ^a   Huang, Yennun ^a,d   Kuo, Sy Yen ^a  

^a NATIONAL TAIWAN UNIVERSITY   (Taiwan)

^b Insightix ^*

^c GOOGLE INC   (United States)

^d Vee Telecom

Author keywords

Network discovery; Network scanning; System fingerprinting

Indexed keywords

INTRUSION DETECTION SYSTEMS; NETWORK DISCOVERY; NETWORK HOSTS; NETWORK MAPPING; NETWORK SCANNING; NETWORK STACK; NETWORK SYSTEMS; OPERATING SYSTEM FINGERPRINTING; OPERATING SYSTEMS; REMOTE NETWORKS; SECURITY NETWORKS; SECURITY TOOLS; TARGET SYSTEMS; VULNERABILITY ANALYSIS;

COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; INTRUSION DETECTION; SCANNING;

NETWORK SECURITY;

EID: 70450104367     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2009.5270338     Document Type: Conference Paper

References (12)

1. O. Arkin and F. Yarochkin. A "Fuzzy" Approach to Remote Active Operating System Fingerprinting. available at http://www.sys-security.com/ archive/papers/Xprobe2.pdf, 2002.
2. D. Crowley. Advanced Application Level OS Fingerprinting: Practical Approaches and Examples. http://www.x10security.org/appOSfingerprint.txt, 2002.
3. Fyodor. Remote OS detection via TCP/IP Stack Finger Printing. http://www.phrack.com/show.php?p=54&a=9, 1998.
4. L. G. Greenwald and T. J. Thomas. Toward undetected operating system fingerprinting. In WOOT '07: Proceedings of the first USENIX workshop on Offensive Technologies, pages 1-10, Berkeley, CA, USA, 2007. USENIX Association.
5. J. Jiao and W. Wu. A Method of Identify OS Based On TCP/IP Fingerptint. In UCSNS International Journal of Computer Science and Network Security, Vol.6 No. 7B, 2006.
6. M. Kydyraliev. Openbsd ttl fingerprinting vulnerability. http://www.securityfocus.com/bid/4401, 2002.
7. A. Luigi. Apache 2.0.39 directory traversal and patch disclosure bug. http://securityvulns.ru/docs3377.html, 2002.
8. P. Ning, Y. Cui, D. S. Reeves, and D. Xu. Techniques and tools for analyzing intrusion alerts. ACM Trans. Inf. Syst. Secur., 7(2):274-318, 2004.
9. G. Portokalidis and H. Bos. Sweetbait: Zero-hour worm detection and containment using low- and high-interaction honeypots. Comput. Netw., 51(5):1256-1274, 2007.
10. S. Shah. Httprint: http web server fingerprinting. http://net-square.com/ httprint/httprint-paper.html, 2004.
11. S. Shah. Ajax fingerprinting. http://www.netsecurity.org/dl/articles/Ajax fingerprinting.pdf, 2007.
12. F. Veysset, O. Courtay, and O. Heen. New Tool and Technique for Remote Operating System Fingerprinting. http://www.intranode.com/site/techno/techno- articles.htm, 2002.