Další formáty:
BibTeX
LaTeX
RIS
@inproceedings{27386, author = {Laštovička, Martin and Jirsík, Tomáš and Čeleda, Pavel and Špaček, Stanislav and Filakovský, Daniel}, address = {Taipei, Taiwan}, booktitle = {NOMS 2018 - 2018 IEEE/IFIP Network Operations and Management Symposium}, doi = {http://dx.doi.org/10.1109/NOMS.2018.8406262}, keywords = {OS fingerprinting;passive monitoring;IPFIX}, howpublished = {elektronická verze "online"}, language = {eng}, location = {Taipei, Taiwan}, isbn = {978-1-5386-3416-5}, pages = {nestránkováno}, publisher = {IEEE Xplore Digital Library}, title = {Passive OS Fingerprinting Methods in the Jungle of Wireless Networks}, url = {https://ieeexplore.ieee.org/document/8406262}, year = {2018} }
TY - JOUR ID - 27386 AU - Laštovička, Martin - Jirsík, Tomáš - Čeleda, Pavel - Špaček, Stanislav - Filakovský, Daniel PY - 2018 TI - Passive OS Fingerprinting Methods in the Jungle of Wireless Networks PB - IEEE Xplore Digital Library CY - Taipei, Taiwan SN - 9781538634165 KW - OS fingerprinting;passive monitoring;IPFIX UR - https://ieeexplore.ieee.org/document/8406262 N2 - Operating system fingerprinting methods are well-known in the domain of static networks and managed environments. Yet few studies tackled this challenge in real networks, where users can bring and connect any device. We evaluate the performance of three OS fingerprinting methods on a large dataset collected from university wireless network. Our results show that method based on HTTP User-agents is the most accurate but can identify only low portion of the traffic. TCP/IP parameters method proved to be the opposite with high identification rate but low accuracy. We also implemented a new method based on detection of communication to OS-specific domains and its performance is comparable to the two established ones. After that, we discuss the impacts of traffic encryption and embracing new protocols such as IPv6 or HTTP/2.0 on OS fingerprinting. Our findings suggest that OS identification based on specific domain detection is viable and corresponds to the current directions of network traffic evolution, while methods based on TCP/IP parameters and User-agents will become ineffective in the future. ER -
LAŠTOVIČKA, Martin, Tomáš JIRSÍK, Pavel ČELEDA, Stanislav ŠPAČEK a Daniel FILAKOVSKÝ. Passive OS Fingerprinting Methods in the Jungle of Wireless Networks. In \textit{NOMS 2018 - 2018 IEEE/IFIP Network Operations and Management Symposium}. Taipei, Taiwan: IEEE Xplore Digital Library. s.~nestránkováno, 9 s. ISBN~978-1-5386-3416-5. doi:10.1109/NOMS.2018.8406262. 2018.
|