Behavioral and Temporal Fingerprinting

Abstract : This paper addresses the fingerprinting of communication protocols based on temporal and behavioral information. The objective of fingerprinting a device speaking a given protocol is to uniquely identify the device by looking at captured traffic that is generated by devices implementing that protocol. This paper proposes a conceptual model for capturing behavior and related temporal information from devices that implement a given protocol. Our key contribution is a fingerprinting scheme, where individual fingerprints are represented by tree-based temporal finite state machines. We have developed a fingerprinting scheme that leverages supervised learning approaches based on support vector machines for this purpose. We have validated the proposed approach on Session Initiation Protocol and concluded that very good classification performance is achieved.
Type de document :
Rapport
[Intern report] RR-6995, INRIA. 2009, pp.22
Liste complète des métadonnées

Littérature citée [1 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/inria-00406482
Contributeur : Jérôme François <>
Soumis le : jeudi 9 février 2012 - 07:00:07
Dernière modification le : jeudi 11 janvier 2018 - 06:19:49
Document(s) archivé(s) le : mardi 13 décembre 2016 - 17:14:01

Fichier

RR-6995.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

  • HAL Id : inria-00406482, version 2

Collections

Citation

Jérôme François, Humberto Abdelnur, Radu State, Olivier Festor. Behavioral and Temporal Fingerprinting. [Intern report] RR-6995, INRIA. 2009, pp.22. 〈inria-00406482v2〉

Partager

Métriques

Consultations de la notice

278

Téléchargements de fichiers

50