PTF: Passive Temporal Fingerprinting - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2011

PTF: Passive Temporal Fingerprinting

Abstract

We describe in this paper a tool named PTF (Passive and Temporal Fingerprinting) for fingerprinting network devices. The objective of device fingerprinting is to uniquely identify device types by looking at captured traffic from devices imple- menting that protocol. The main novelty of our approach consists in leveraging both temporal and behavioral features for this purpose. The key contribution is a fingerprinting scheme, where individual fingerprints are represented by tree-based temporal finite state machines. We have developed a fingerprinting scheme that leverages supervised learning approaches based on support vector machines for this purpose.
Fichier principal
Vignette du fichier
77728_1.pdf (365.01 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-00645299 , version 1 (27-11-2011)

Identifiers

  • HAL Id : hal-00645299 , version 1

Cite

Jérôme François, Humberto Abdelnur, Radu State, Olivier Festor. PTF: Passive Temporal Fingerprinting. 12th IFIP/IEEE International Symposium on Integrated Network Management - IM'2011, May 2011, Dublin, Ireland. 8 p. ⟨hal-00645299⟩
192 View
413 Download

Share

Gmail Facebook X LinkedIn More