Skip to main content
USENIX
  • Conferences
  • Students
Sign in

connect with us


  •  Twitter
  •  Facebook
  •  LinkedIn
  •  Google+
  •  YouTube

twitter

Tweets by @usenix

usenix conference policies

  • Event Code of Conduct
  • Conference Network Policy
  • Statement on Environmental Responsibility Policy

You are here

Home ยป Defeating TCP/IP Stack Fingerprinting
Tweet

connect with us

Defeating TCP/IP Stack Fingerprinting

Abstract: 

This paper describes the design and implementation of a TCP/IP stack fingerprint scrubber. The fingerprint scrubber is a new tool to restrict a remote user's ability to determine the operating system of another host on the network. Allowing entire subnetworks to be remotely scanned and characterized opens up security vulnerabilities. Specifically, operating system exploits can be efficiently run against a pre-scanned network because exploits will usually only work against a specific operating system or software running on that platform. The fingerprint scrubber works at both the network and transport layers to convert ambiguous traffic from a heterogeneous group of hosts into sanitized packets that do not reveal clues about the hosts' operating systems. This paper evaluates the performance of a fingerprint scrubber implemented in the FreeBSD kernel and looks at the limitations of this approach.

Matthew Smart, University of Michigan

G. Robert Malan, University of Michigan

Farnam Jahanian, University of Michigan

BibTeX
@inproceedings {271266,
author = {Matthew Smart and G. Robert Malan and Farnam Jahanian},
title = {Defeating {TCP/IP} Stack Fingerprinting},
booktitle = {9th USENIX Security Symposium (USENIX Security 00)},
year = {2000},
address = {Denver, CO},
url = {https://www.usenix.org/conference/9th-usenix-security-symposium/defeating-tcpip-stack-fingerprinting},
publisher = {USENIX Association},
month = aug,
}
Download

Links

Paper: 
http://www.usenix.org/events/sec2000/full_papers/smart/smart.pdf
Paper (HTML): 
http://www.usenix.org/events/sec2000/full_papers/smart/smart_html/index.html
  • Log in or    Register to post comments

© USENIX

  • Privacy Policy
  • Contact Us