FiG: Automatic Fingerprint Generation

Proceedings of the Symposium on Network and Distributed System Security, NDSS 2007

Volumn , Issue , 2007, Pages

  Caballero, Juan ^a   Venkataraman, Shobha ^a   Poosankam, Pongsin ^a   Kang, Min Gyung ^a   Song, Dawn ^a   Blum, Avrim ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLASSIFICATION (OF INFORMATION); LEARNING SYSTEMS; NETWORK SECURITY;

CANDIDATE QUERY; CLASSIFICATION FUNCTIONS; LEARN+; MACHINE LEARNING TECHNIQUES; MANUAL PROCESS; NETWORKING COMMUNITY; REMOTE HOST; SEARCH SPACES; SECURITY COMMUNITY;

PALMPRINT RECOGNITION;

EID: 85038902950     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (28)

1. BIND. http://www.isc.org/index.pl?/sw/bind/.
2. fpdns. http://www.rfc.se/fpdns/.
3. Fyodor. Remote OS detection via TCP/IP fingerprinting (2nd generation). http://insecure.org/nmap/osdetect/.
4. Fyodor. Remote OS detection via TCP/IP stack fingerprinting. Phrack 54, Vol. 8. December 25, 1998. http://www.phrack.com/phrack/51/P51-11.
5. IPpersonality. http://ippersonality.sourceforge.net/.
6. Know your enemy: Passive fingerprinting. identifying remote hosts, without them knowing. Honeynet project. http://project.honeynet.org/papers/finger/.
7. Morph. http://www.synacklabs.net/projects/morph/.
8. Nessus. http://www.nessus.org/.
9. Nmap. http://www.insecure.org/.
10. p0f. http://lcamtuf.coredump.cx/p0f.shtml.
11. Queso. http://www.l0t3k.net/tools/FingerPrinting/.
12. Xprobe2. http://www.sys-security.com/.
13. R. Beverly. A robust classifier for passive TCP/IP fingerprinting. In Proceedings of the 5th Passive and Active Measurement Workshop, 2004.
14. A. Blum. On-line algorithms in machine learning. In Online Algorithms, pages 306–325, 1996.
15. D. Comer and J. C. Lin. Probing TCP implementations. In USENIX Summer, 1994.
16. J. Franklin, D. McCoy, P. Tabriz, V. Neagoe, J. V. Randwyk, and D. Sicker. Passive data link layer 802.11 wireless device driver fingerprinting. In Proceedings of the 15th Usenix Security Symposium, 2006.
17. M. Kearns and U. Vazirani. An Introduction to Computational Learning Theory. MIT Press, 1994.
18. T. Kohno, A. Broido, and kc claffy. Remote physical device fingerprinting. In Proceedings of the IEEE Symposium on Security and Privacy, 2005.
19. R. Lippmann, D. Fried, K. Piwowarski, and W. Streilein. Passive operating system identification from TCP/IP packet headers. In Proceedings of the ICDM Workshop on Data Mining for Computer Security, 2003.
20. G. Malan, D. Watson, and F. Jahanian. Transport and application protocol scrubbing. In Proceedings of IEEE INFO-COM, 2000.
21. P. V. Mockapetris. RFC 1035: Domain names — implementation and specification, 1987.
22. J. Padhye and S. Floyd. Identifying the TCP behavior of web servers. In Proceedings of ACM SIGCOMM, 2001.
23. V. Paxson. Automated packet trace analysis of TCP implementations. In Proceedings of ACM SIGCOMM, 1997.
24. D. Pelleg and A. Moore. X-means: Extending k-means with efficient estimation of the number of clusters. In Proceedings of the Seventeenth International Conference on Machine Learning, pages 727–734, San Francisco, 2000.
25. J. Postel. Transmission control protocol. RFC 793 (Standard), 1981.
26. K. Ramakrishnan, S. Floyd, and D. Black. The Addition of Explicit Congestion Notification (ECN) to IP. RFC 3168 (Proposed Standard), 2001.
27. M. Smart, G. R. Malan, and F. Jahanian. Defeating TCP/IP stack fingerprinting. In Proceedings of the 9th USENIX Security Symposium, 2000.
28. V. V. Vazirani. Approximation Algorithms. Springer-Verlag, Berlin, 2001.