Behavioral and Temporal Fingerprinting - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Rapport (Rapport De Recherche) Année : 2009

Behavioral and Temporal Fingerprinting

Résumé

This paper addresses the fingerprinting of communication protocols based on temporal and behavioral information. The objective of fingerprinting a device speaking a given protocol is to uniquely identify the device by looking at captured traffic that is generated by devices implementing that protocol. This paper proposes a conceptual model for capturing behavior and related temporal information from devices that implement a given protocol. Our key contribution is a fingerprinting scheme, where individual fingerprints are represented by tree-based temporal finite state machines. We have developed a fingerprinting scheme that leverages supervised learning approaches based on support vector machines for this purpose. We have validated the proposed approach on Session Initiation Protocol and concluded that very good classification performance is achieved.
Fichier principal
Vignette du fichier
RR-6995.pdf (733.25 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

inria-00406482 , version 1 (22-07-2009)
inria-00406482 , version 2 (09-02-2012)

Identifiants

  • HAL Id : inria-00406482 , version 1

Citer

Jérôme François, Humberto Abdelnur, Radu State, Olivier Festor. Behavioral and Temporal Fingerprinting. [Research Report] RR-6995, 2009, pp.22. ⟨inria-00406482v1⟩

Collections

INRIA-RRRT
135 Consultations
57 Téléchargements

Partager

Gmail Facebook X LinkedIn More