Skip to Main content Skip to Navigation
Conference papers

PTF: Passive Temporal Fingerprinting

Abstract : We describe in this paper a tool named PTF (Passive and Temporal Fingerprinting) for fingerprinting network devices. The objective of device fingerprinting is to uniquely identify device types by looking at captured traffic from devices imple- menting that protocol. The main novelty of our approach consists in leveraging both temporal and behavioral features for this purpose. The key contribution is a fingerprinting scheme, where individual fingerprints are represented by tree-based temporal finite state machines. We have developed a fingerprinting scheme that leverages supervised learning approaches based on support vector machines for this purpose.
Document type :
Conference papers
Complete list of metadata

https://hal.inria.fr/hal-00645299
Contributor : Olivier Festor <>
Submitted on : Sunday, November 27, 2011 - 8:22:35 PM
Last modification on : Friday, February 26, 2021 - 3:28:04 PM
Long-term archiving on: : Friday, November 16, 2012 - 12:12:09 PM

File

77728_1.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : hal-00645299, version 1

Collections

Citation

Jérôme François, Humberto Abdelnur, Radu State, Olivier Festor. PTF: Passive Temporal Fingerprinting. 12th IFIP/IEEE International Symposium on Integrated Network Management - IM'2011, May 2011, Dublin, Ireland. 8 p. ⟨hal-00645299⟩

Share

Metrics

Record views

413

Files downloads

671