Abstract:
Remote OS detection is an important technique in information network system security, because it closed links with security holes. This paper presents the remote OS detection based on TCP/IP stack fingerprinting, and gives emphasis on describing and analyzing two newl implemening techniques: fingerprinting via RTO sampling and fingerprinting via ICMP responses.
摘要: 远程操作系统探测是网络信息系统安全中与攻防密切相关的技术,它与安全漏洞息息相关。该文基于TCP/IP协议栈指纹辨识的远程操作系统探测,着重阐述和分析了两种较为新颖的实现技术:基于RTO采样的指纹辨识和基于ICMP响应的指纹辨识。
关键词:
信息安全,
操作系统探测,
栈指纹辨识
CLC Number:
WANG Yijun, XUE Zhi, LI Jianhua. Remote OS Detection Based on TCP/IP Stack Fingerprinting[J]. , 2004, 30(18): 8-10.
王轶骏,薛质,李建华. 基于TCP/IP协议栈指纹辨识的远程操作系统探测[J]. , 2004, 30(18): 8-10.