Skip to Main content Skip to Navigation
Reports

Behavioral and Temporal Fingerprinting

Jérôme François 1 Humberto Abdelnur 1 Radu State 2 Olivier Festor 1 
1 MADYNES - Management of dynamic networks and services
INRIA Lorraine, LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications
Abstract : This paper addresses the fingerprinting of communication protocols based on temporal and behavioral information. The objective of fingerprinting a device speaking a given protocol is to uniquely identify the device by looking at captured traffic that is generated by devices implementing that protocol. This paper proposes a conceptual model for capturing behavior and related temporal information from devices that implement a given protocol. Our key contribution is a fingerprinting scheme, where individual fingerprints are represented by tree-based temporal finite state machines. We have developed a fingerprinting scheme that leverages supervised learning approaches based on support vector machines for this purpose. We have validated the proposed approach on Session Initiation Protocol and concluded that very good classification performance is achieved.
Complete list of metadata

Cited literature [1 references]  Display  Hide  Download

https://hal.inria.fr/inria-00406482
Contributor : Jérôme François Connect in order to contact the contributor
Submitted on : Thursday, February 9, 2012 - 7:00:07 AM
Last modification on : Wednesday, February 2, 2022 - 3:51:30 PM
Long-term archiving on: : Tuesday, December 13, 2016 - 5:14:01 PM

File

RR-6995.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : inria-00406482, version 2

Collections

Citation

Jérôme François, Humberto Abdelnur, Radu State, Olivier Festor. Behavioral and Temporal Fingerprinting. [Intern report] RR-6995, INRIA. 2009, pp.22. ⟨inria-00406482v2⟩

Share

Metrics

Record views

124

Files downloads

53