Remote Operation System Detection Base on Machine Learning

• Published in: 2009 Fourth International Conference on Frontier of Computer Science and Technology pp. 539 - 542
• Main Authors: Bofeng Zhang, Tiezheng Zou, Yongjun Wang, Baokang Zhang
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.12.2009
• Subjects: Computer science; Educational institutions; Fingerprint recognition; Learning systems; Machine learning; OS detection; OS fingerprint; Protocols; Space technology; support vector machine; Support vector machine classification; Support vector machines
• ISBN: 0769539327; 9780769539324; 1424454662; 9781424454662
• ISSN: 2159-6301
• DOI: 10.1109/FCST.2009.21

A machine learning method for remote operation system recognition through their detection signatures with support vector machine (SNM) is proposed. A vector space model of Nmap fingerprint database and techniques for translating the host responses to SVM input vectors are also suggested. Experimental result on identification of signatures in the fingerprint database of Nmap 4.90RC1 but not known for Nmap 4.76 show that our method is effective in the discovery of new signatures not included in current fingerprint database.