2014/03/04 by Michael Hanspach, R. Schumann, Ralf Schumann +6
Computer Science · #Computer network #Computer science #Computer security #Cryptography and Security (cs.CR) #DNA profiling #FOS: Computer and information sciences #File Transfer Protocol #Fingerprint (computing) #Fingerprint recognition #Fuzz testing #Identification (biology) #Network Security and Intrusion Detection #Networking and Internet Architecture (cs.NI) #Operating system #Server #Service (business) #Software #Software Testing and Debugging Techniques #The Internet #User Authentication and Security Systems #World Wide Web #cs.CR #cs.NI
paper · pdf · doi:10.48550/arxiv.1403.0766
published in arXiv (Cornell University) (Cornell University) · 10 pages, May 2009, German language content. This paper is based on the Diplom thesis / Diplomarbeit: "Verbesserung von OS- und Service-Fingerprinting mittels Fuzzing", Michael Hanspach, September 2008. DACH Security 2009: Bestandsaufnahme - Konzepte - Anwendungen - Perspektiven, May 2009, ISBN 300027488X
arxiv created 2014/03/04 · openalex publication_date 2014/03/04 · arxiv updated 2014/03/05 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
Service fingerprinting (i.e. the identification of network services and other applications on computing systems) is an essential part of penetration tests. The main contribution of this paper is a study on the improvement of fingerprinting tools. By applying mutation-based fuzzing as a fingerprint generation method, subtle differences in response messages can be identified. These differences in response messages provide means for the differentiation and identification of network services. To prove the feasibility of the approach, an implementation of a fingerprinting tool for ftp servers is presented and compared to preexisting fingerprinting tools. As a result of this study it is shown that mutation-based fuzzing is an appropriate method for service fingerprinting that even offers advantages over preexisting methods.