摘要： 远程操作系统探测是网络信息系统安全中与攻防密切相关的技术,它与安全漏洞息息相关。该文基于TCP/IP协议栈指纹辨识的远程操作系统探测,着重阐述和分析了两种较为新颖的实现技术:基于RTO采样的指纹辨识和基于ICMP响应的指纹辨识。

关键词: 信息安全, 操作系统探测, 栈指纹辨识

Abstract: Remote OS detection is an important technique in information network system security, because it closed links with security holes. This paper presents the remote OS detection based on TCP/IP stack fingerprinting, and gives emphasis on describing and analyzing two newl implemening techniques: fingerprinting via RTO sampling and fingerprinting via ICMP responses.

中图分类号: 

• TP393.08