Behavioral and Temporal Fingerprinting - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Reports Year : 2009

Behavioral and Temporal Fingerprinting

Abstract

This paper addresses the fingerprinting of communication protocols based on temporal and behavioral information. The objective of fingerprinting a device speaking a given protocol is to uniquely identify the device by looking at captured traffic that is generated by devices implementing that protocol. This paper proposes a conceptual model for capturing behavior and related temporal information from devices that implement a given protocol. Our key contribution is a fingerprinting scheme, where individual fingerprints are represented by tree-based temporal finite state machines. We have developed a fingerprinting scheme that leverages supervised learning approaches based on support vector machines for this purpose. We have validated the proposed approach on Session Initiation Protocol and concluded that very good classification performance is achieved.
Fichier principal
Vignette du fichier
RR-6995.pdf (691.38 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

inria-00406482 , version 1 (22-07-2009)
inria-00406482 , version 2 (09-02-2012)

Identifiers

  • HAL Id : inria-00406482 , version 2

Cite

Jérôme François, Humberto Abdelnur, Radu State, Olivier Festor. Behavioral and Temporal Fingerprinting. [Intern report] RR-6995, INRIA. 2009, pp.22. ⟨inria-00406482v2⟩
131 View
57 Download

Share

Gmail Facebook Twitter LinkedIn More