LAŠTOVIČKA, Martin, Stanislav ŠPAČEK, Petr VELAN and Pavel ČELEDA. Using TLS Fingerprints for OS Identification in Encrypted Traffic. Online. In 2020 IEEE/IFIP Network Operations and Management Symposium (NOMS 2020). Budapešť, Maďarsko: IEEE Xplore Digital Library, 2020, p. 1-6. ISBN 978-1-7281-4973-8. Available from: https://dx.doi.org/10.1109/NOMS47738.2020.9110319.
Other formats:   BibTeX LaTeX RIS
Basic information
Original name Using TLS Fingerprints for OS Identification in Encrypted Traffic
Authors LAŠTOVIČKA, Martin (203 Czech Republic, guarantor, belonging to the institution), Stanislav ŠPAČEK (203 Czech Republic, belonging to the institution), Petr VELAN (203 Czech Republic, belonging to the institution) and Pavel ČELEDA (203 Czech Republic, belonging to the institution).
Edition Budapešť, Maďarsko, 2020 IEEE/IFIP Network Operations and Management Symposium (NOMS 2020), p. 1-6, 6 pp. 2020.
Publisher IEEE Xplore Digital Library
Other information
Original language English
Type of outcome Proceedings paper
Confidentiality degree is not subject to a state or trade secret
Publication form electronic version available online
WWW URL
RIV identification code RIV/00216224:14610/20:00115200
Organization Ústav výpočetní techniky – Repository – Repository
ISBN 978-1-7281-4973-8
Doi http://dx.doi.org/10.1109/NOMS47738.2020.9110319
UT WoS 000716920500047
Keywords in English OS fingerprinting;passive monitoring;IPFIX;TLS
Links EF16_019/0000822, research and development project. MUNI/A/1411/2019, interní kód Repo. 830927, interní kód Repo.
Changed by Changed by: RNDr. Daniel Jakubík, učo 139797. Changed: 17/5/2022 04:14.
Abstract
Asset identification plays a vital role in situational awareness building. However, the current trends in communication encryption and the emerging new protocols turn the well-known methods into a decline as they lose the necessary data to work correctly. In this paper, we examine the traffic patterns of the TLS protocol and its changes introduced in version 1.3. We train a machine learning model on TLS handshake parameters to identify the operating system of the client device and compare its results to well-known identification methods. We test the proposed method in a large wireless network. Our results show that precise operating system identification can be achieved in encrypted traffic of mobile devices and notebooks connected to the wireless network.
Type Name Uploaded/Created by Uploaded/Created Rights
2020-NOMS-Using-TLS-Fingerprints-for-OS-Identification-in-Encrypted-Traffic-paper.pdf   File version 15/8/2020

Properties

Name
2020-NOMS-Using-TLS-Fingerprints-for-OS-Identification-in-Encrypted-Traffic-paper.pdf
Address within IS
https://repozitar.cz/auth/repo/39018/874025/
Address for the users outside IS
https://repozitar.cz/repo/39018/874025/
Address within Manager
https://repozitar.cz/auth/repo/39018/874025/?info
Address within Manager for the users outside IS
https://repozitar.cz/repo/39018/874025/?info
Uploaded/Created
Sat 15/8/2020 08:54

Rights

Right to read
  • anyone on the Internet
Right to upload
 
Right to administer:
  • a concrete person Mgr. Lucie Vařechová, uco 106253
  • a concrete person RNDr. Daniel Jakubík, uco 139797
  • a concrete person Mgr. Jolana Surýnková, uco 220973
Attributes
 
2020-NOMS-Using-TLS-Fingerprints-for-OS-Identification-in-Encrypted-Traffic-presentation.pdf   File version 15/8/2020

Properties

Name
2020-NOMS-Using-TLS-Fingerprints-for-OS-Identification-in-Encrypted-Traffic-presentation.pdf
Address within IS
https://repozitar.cz/auth/repo/39018/874026/
Address for the users outside IS
https://repozitar.cz/repo/39018/874026/
Address within Manager
https://repozitar.cz/auth/repo/39018/874026/?info
Address within Manager for the users outside IS
https://repozitar.cz/repo/39018/874026/?info
Uploaded/Created
Sat 15/8/2020 08:54

Rights

Right to read
  • anyone on the Internet
Right to upload
 
Right to administer:
  • a concrete person Mgr. Lucie Vařechová, uco 106253
  • a concrete person RNDr. Daniel Jakubík, uco 139797
  • a concrete person Mgr. Jolana Surýnková, uco 220973
Attributes
 
Print
Add to clipboard Displayed: 19/5/2024 19:56