Smartphone reconnaissance: Operating system identification
Smartphone reconnaissance: Operating system identification
复制标题
智能手机侦察：操作系统识别
DOI：
--
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
R. Bettati
中科院分区：
文献类型：
--
作者：
Nick Ruffing;Ye Zhu;Rudy Libertini;Y. Guan;R. Bettati
智能手机侦察是对目标智能手机发起安全攻击的第一步，它使对手能够通过利用目标系统的已知漏洞来定制攻击。我们调查操作系统识别对智能手机使用加密流量。提出了一种基于加密流量频谱分析的流量内容不可知识别算法。该识别算法的设计是为了通过去除噪声频率分量来实现高识别精度，并在计算复杂度方面实现高效率。我们评估识别算法对收集的智能手机流量。实验结果表明，该算法能够准确识别智能手机操作系统。识别准确率可达100%，仅需30秒的智能手机流量。
Smartphone reconnaissance, the first step to launch security attacks to a target smartphone, enables an adversary to tailor attacks by exploiting known vulnerabilities of the target system. We investigate OS identification against smartphones that use encrypted traffic. A traffic content agnostic identification algorithm is proposed that is based on the spectral analysis of the encrypted traffic. The identification algorithm is designed for high identification accuracy by removing noise frequency components and for high efficiency in terms of computation complexity. We evaluate the identification algorithm against collected smartphone traffic. The experiment results show that the algorithm can identify the smartphone OS accurately. The identification accuracy can reach 100% with only 30 seconds of smartphone traffic.