Defeating TCP/IP stack fingerprinting

Proceedings of the 9th USENIX Security Symposium

Volumn , Issue , 2000, Pages

  Smart, Matthew ^a   Malan, G Robert ^a   Jahanian, Farnam ^a  

^a UNIVERSITY OF MICHIGAN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK LAYERS; SCRUBBERS;

DESIGN AND IMPLEMENTATIONS; FREEBSD; REMOTE USERS; SECURITY VULNERABILITIES; SUBNETWORKS; TRANSPORT LAYERS;

TRANSMISSION CONTROL PROTOCOL;

EID: 85084160906     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. F. Baker. Requirements for IP Version 4 Routers. RFC 1812, 1995.
2. D. Brent Chapman and Elizabeth D. Zwicky. Building Internet Firewalls. O'Reily and Associates, Inc., 1995.
3. Fyodor. Remote OS detection via TCP/IP stack fingerprinting. http://www.insecure.org/nmap/nmap-fingerprinting-article.html, October 1998.
4. D. Harkins and D. Carrel. The Internet Key Exchange (IKE). RFC 2409, November 1998.
5. Intel Internet Exchange Architecture. http://developer.intel.com/design/IXA/.
6. S. Kent and R. Atkinson. Security Architecture for the Internet Protocol. RFC 2401, November 1998.
7. G. Robert Malan, David Watson, Farnam Jahanian, and Paul Howell. Transport and Application Protocol Scrubbing. In Proceedings of the IEEE IN-FOCOM 2000 Conference, Tel Aviv, Israel, March 2000.
8. David Maltz and Pravin Bhagwat. TCP Splicing for Application Layer Proxy Performance. Technical Report RC 21139, IBM Research Division, March 1998.
9. D. Maughan, M. Schertier, M. Schneider, and J. Turner. Internet Security Association and Key Mangement Protocol (ISAKMP). RFC 2408, November 1998.
10. Ryan McCabe. Iplog. http://ojnk.sourceforge.net/.
11. Netperf: A Network Performance Benchmark. http://www.netperf.org/.
12. Vern Paxson. Automated packet trace analysis of TCP implementations. In Proceedings of ACM SIGCOMM '97, Cannes, France, September 1997.
13. Thomas H. Ptacek and Timothy N. Newsham. Insertion, evasion, and denial of service: Eluding network intrusion detection. Originally Secure Networks, Inc., now available white paper at the Network Associates Inc. homepage at http://www.nai.com/, January 1998.
14. David Putzolu, Sanjay Bakshi, Satyendra Yadav, and Raj Yavatkar. The Phoenix Framework: A Practical Architecture for Programmable Networks. IEEE Communications, 38(3):160-165, March 2000.
15. Queso Homepage. http://www.apostols.org/projectz/queso/.
16. PGP Security. Gauntlet Firewall. http://www.pgp.com/asp-set/products/tns/gauntlet.asp.
17. Oliver Spatscheck, Jörgen S. Hansen, John H. Hartman, and Larry L. Peterson. Optimizing TCP Forwarder Performance. Technical Report TR98-01, Dept. of Computer Science, University of Arizona, February 1998.
18. Trusted Information Systems. TIS Firewall Toolkit, ftp://ftp.tislabs.com/pub/firewalls/toolkit.