Advanced Fingerprinting For Inventory Management

Jérôme François (1) , Humberto Abdelnur (1) , Radu State (2) , Olivier Festor (1)

1 MADYNES - Management of dynamic networks and services
2 FSTC - Faculté des Sciences, de la Technologie et de la Communication

Identifying the protocol stack or the device version of remote equipment is a powerful tool for security assessment and network management. This paper proposes two novel fingerprinting techniques based on the syntactic tree representation of messages. The first leverages the support vector machines paradigm and needs a learning stage while the second one executed in an unsupervised manner thanks to a new classification algorithm. The approaches are validated through extensive experimentations and show very good behaviors.

Mots clés: fingerprinting; inventory management; syntactic tree; SVM; learning machines

Domaines: Réseaux et télécommunications [cs.NI]

Jérôme François, Humberto Abdelnur, Radu State, Olivier Festor. Advanced Fingerprinting For Inventory Management. [Research Report] RR-7044, INRIA. 2009, pp.24. ⟨inria-00419766⟩