A New Method about Operating System Identification

摘要：

To resolve the question:penetrate firewall and accurately identify the remote host operating system,research deeply on the ARP protocol and the TCP/IP protocol stack,provide a mothed about host detection through firewall,describes the TCP port scanning process,design a fingerprint storehouse,TCP hag first part and operating system detecting process,develop the network security assessment system based on this way.Test results show that this system can penetrate firewall and accurately identify the target host operating system.

关键词： ARP Protocol Network Security Operating System Identification TCP/IP Fingerprint

作者: Xinchao Han Xianfeng Du

作者单位: School of Computer Science ZhongYuan University of Technology ZhengZhou Key Lab of Computer Network School of Computer Science ZhongYuan University of Technology ZhengZhou.HeNan,China

会议类型: 国际会议

会议名称: 2010 2nd IEEE International Conference on Information and Financial Engineering(2010年第二届IEEE信息与金融工程国际会议 ICIFE 2010)

会议地点: 重庆

会议语种:英文

页码: 882-885

在线出版日期: 2010-09-17（万方平台首次上网日期，不代表论文的发表时间）