Author Login Chief Editor Login Reviewer Login Editor Login Remote Office

›› 2004, Vol. 30 ›› Issue (18): 8-10.

• Papers • Previous Articles     Next Articles

Remote OS Detection Based on TCP/IP Stack Fingerprinting

WANG Yijun, XUE Zhi, LI Jianhua   

  1. (Dept. of Electronic Engineering, Shanghai Jiaotong University, Shanghai 200030)
  • Published:2004-09-25

基于TCP/IP协议栈指纹辨识的远程操作系统探测

王轶骏,薛质,李建华   

  1. 上海交通大学电子工程系,上海交通大学电子工程系,上海交通大学电子工程系 上海 200030

Abstract: Remote OS detection is an important technique in information network system security, because it closed links with security holes. This paper presents the remote OS detection based on TCP/IP stack fingerprinting, and gives emphasis on describing and analyzing two newl implemening techniques: fingerprinting via RTO sampling and fingerprinting via ICMP responses.

摘要: 远程操作系统探测是网络信息系统安全中与攻防密切相关的技术,它与安全漏洞息息相关。该文基于TCP/IP协议栈指纹辨识的远程操作系统探测,着重阐述和分析了两种较为新颖的实现技术:基于RTO采样的指纹辨识和基于ICMP响应的指纹辨识。

关键词: 信息安全, 操作系统探测, 栈指纹辨识

CLC Number: