Skip to Main content Skip to Navigation

Behavioral and Temporal Fingerprinting

Jérôme François 1 Humberto Abdelnur 1 Radu State 2 Olivier Festor 1 
1 MADYNES - Management of dynamic networks and services
INRIA Lorraine, LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications
Abstract : This paper addresses the fingerprinting of communication protocols based on temporal and behavioral information. The objective of fingerprinting a device speaking a given protocol is to uniquely identify the device by looking at captured traffic that is generated by devices implementing that protocol. This paper proposes a conceptual model for capturing behavior and related temporal information from devices that implement a given protocol. Our key contribution is a fingerprinting scheme, where individual fingerprints are represented by tree-based temporal finite state machines. We have developed a fingerprinting scheme that leverages supervised learning approaches based on support vector machines for this purpose. We have validated the proposed approach on Session Initiation Protocol and concluded that very good classification performance is achieved.
Complete list of metadata

Cited literature [1 references]  Display  Hide  Download
Contributor : Jérôme François Connect in order to contact the contributor
Submitted on : Thursday, February 9, 2012 - 7:00:07 AM
Last modification on : Wednesday, February 2, 2022 - 3:51:30 PM
Long-term archiving on: : Tuesday, December 13, 2016 - 5:14:01 PM


Files produced by the author(s)


  • HAL Id : inria-00406482, version 2



Jérôme François, Humberto Abdelnur, Radu State, Olivier Festor. Behavioral and Temporal Fingerprinting. [Intern report] RR-6995, INRIA. 2009, pp.22. ⟨inria-00406482v2⟩



Record views


Files downloads